Threat Research

Blitz is a Windows-based malware first discovered in 2024 and actively developed into early 2025. It spreads via backdoored game cheats and operates in two stages: a downloader and a bot payload. The malware’s developer abused Hugging Face Spaces—a platform for hosting AI models—as part of Blitz's command and control (C2) infrastructure....

Since last year, we have been monitoring a Windows bot malware known as "Blitz." Its infection chain involves multiple stages, including an initial dropper, a downloader, and the main botnet component....