Fileless AsyncRAT spreads via fake CAPTCHA clicks. Scattered Spider (0ktapus, UNC3944, Scatter Swine, Starfraud, Muddled Libra) expands into U.S. insurance via social engineering and SIM swapping. Flodrix botnet exploits Langflow RCE for DDoS attacks.