RemotePanel and BoundSiphon: A Dual-Payload Toolkit for Persistent Access and Browser Theft

Reported 24 Sep 2026 by otx · Severity: medium

Two previously undocumented .NET malware components were delivered through a ClickFix infection chain. RemotePanel establishes persistent remote access by masquerading as the Windows Time service, providing operators with PowerShell control, file and process management, screen ac