TI Mindmap HUB
Threat Intelligence Report

Fake National Health Service website distributes StreamRat on Android and XWorm on Windows

📅 September 27, 2026 📰 cert-agid.gov.it 🔍 0 CVE(s) referenced

A fake Italian National Health Service website detects visitors’ devices to deliver StreamRAT on Android or an obfuscated PowerShell chain deploying XWorm on Windows, enabling extensive remote control.

gov

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle