ANY.RUN Reveals Major Cyber Attacks Targeting Businesses in February 2026

DUBAI, DUBAI, UNITED ARAB EMIRATES, March 4, 2026 /EINPresswire.com/ -- ANY.RUN, a provider of interactive malware analysis and threat intelligence solutions, has published new research outlining the most significant cyber threats targeting organizations in February 2026. The report highlights how modern threat actors increasingly exploit trusted infrastructure, legitimate workflows, and gaps in early detection.

𝐊𝐞𝐲 𝐓𝐡𝐫𝐞𝐚𝐭 𝐓𝐫𝐞𝐧𝐝𝐬 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐓𝐞𝐚𝐦𝐬 𝐒𝐡𝐨𝐮𝐥𝐝 𝐖𝐚𝐭𝐜𝐡

February’s investigations reveal several important shifts in attacker tactics that directly impact enterprise security programs.

· 𝗚𝗥𝗘𝗘𝗡𝗕𝗟𝗢𝗢𝗗, a Go-based ransomware capable of encrypting environments within minutes using ChaCha8 encryption, followed by self-deletion and extortion via a TOR-based leak site.

· 𝗕𝗤𝗧𝗟𝗼𝗰𝗸, a stealth-oriented ransomware chain that injects into trusted Windows processes, performs UAC bypass, establishes persistence, and steals credentials before visible encryption begins.

· 𝗠𝗼𝗼𝗻𝗿𝗶𝘀𝗲 𝗥𝗔𝗧, a previously undocumented RAT discovered with zero detections on VirusTotal at the time of analysis, capable of credential theft, screen capture, remote command execution, and long-term persistence.

· 𝗞𝗮𝗿𝘀𝘁𝗼 𝗥𝗔𝗧, a modular RAT with built-in victim profiling, selective activation logic, and disguised command-and-control traffic designed to evade network monitoring.

Learn more about the active campaigns on ANY.RUN’s blog.

𝐇𝐨𝐰 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐓𝐞𝐚𝐦𝐬 𝐂𝐚𝐧 𝐈𝐦𝐩𝐫𝐨𝐯𝐞 𝐄𝐚𝐫𝐥𝐲 𝐓𝐡𝐫𝐞𝐚𝐭 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧

Strengthening early threat detection requires shifting security operations from static checks to behavior-driven investigation processes. Security teams can validate suspicious files and URLs through sandbox analysis, correlate indicators with active campaigns, and use continuously updated threat intelligence to prioritize risks earlier in the attack lifecycle. Together, these processes help organizations move from reactive incident response toward proactive detection and faster containment of emerging threats.

𝐀𝐛𝐨𝐮𝐭 𝐀𝐍𝐘.𝐑𝐔𝐍

ANY.RUN provides interactive malware analysis and threat intelligence solutions that help SOC teams detect threats earlier and respond faster. Today, more than 600,000 security professionals across 15,000 organizations rely on ANY.RUN to accelerate investigations and strengthen detection against evolving phishing and malware campaigns.

The ANY.RUN team
ANYRUN FZCO
+1 657-366-5050
email us here
Visit us on social media:
LinkedIn
YouTube
X

Legal Disclaimer:

EIN Presswire provides this news content "as is" without warranty of any kind. We do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.