Russian CTRL toolkit spread via malicious LNK files in February 2026, routing C2 through FRP-tunneled RDP to evade detection.
A fake Avast scan tells you your PC is infected, then installs the malware that steals passwords, session data and crypto ...