Skip to main content
Copyright Lure to Rhadamanthys Stealer operation cover
COMING SOONIntermediate

Copyright Lure to Rhadamanthys Stealer

A procurement officer opened a copyright-infringement notice, followed a shortened link, and ran a signed PDF reader out of a Downloads folder. Follow the chain from a CDN-fronted delivery domain through a DLL search-order hijack and a Run-key autostart to the Rhadamanthys stealer's single command-and-control channel, where the beacon and the stolen data ride together.

45m
6 tasks
50 points
Free

Launches today

Jul 3, 2026

Friday, July 3, 2026 at 9:00 AM

Create your free account

Be ready the moment it drops — free forever.

Training Tools

SIEMXDRFirewall

What you'll investigate

6 objectives unlock when this operation goes live.

1Trace the delivery domain
2Name what was actually run
3Find the smuggled module
4Classify the execution technique
5Pin down persistence
6Cut off command-and-control

Be first when it launches

Create your free account now. The moment this operation goes live on Jul 3, 2026, you can jump straight in — and you'll have the rest of the catalog to train on meanwhile.

Get Started Free

No credit card required — free forever