RAT

China-linked APT deployed malware in a network of the Dutch Ministry of DefenceChina-linked APT deployed malware in a network of the Dutch Ministry of Defence

China-linked APT deployed malware in a network of the Dutch Ministry of Defence

China-linked APT group breached the Dutch Ministry of Defence last year and installed malware on compromised systems. Dutch Military Intelligence and Security…

1 year ago
New Krasue Linux RAT targets telecom companies in ThailandNew Krasue Linux RAT targets telecom companies in Thailand

New Krasue Linux RAT targets telecom companies in Thailand

A previously undetected Linux RAT dubbed Krasue has been observed targeting telecom companies in Thailand. Group-IB researchers discovered a previously…

1 year ago
Attackers use Google Calendar RAT to abuse Calendar service as C2 infrastructureAttackers use Google Calendar RAT to abuse Calendar service as C2 infrastructure

Attackers use Google Calendar RAT to abuse Calendar service as C2 infrastructure

Google warns of multiple threat actors that are leveraging its Calendar service as a command-and-control (C2) infrastructure. Google warns of multiple threat…

2 years ago
QwixxRAT, a new Windows RAT appears in the threat landscapeQwixxRAT, a new Windows RAT appears in the threat landscape

QwixxRAT, a new Windows RAT appears in the threat landscape

QwixxRAT is a new Windows remote access trojan (RAT) that is offered for sale through Telegram and Discord platforms. The…

2 years ago
Updated Android spyware GravityRAT steals WhatsApp BackupsUpdated Android spyware GravityRAT steals WhatsApp Backups

Updated Android spyware GravityRAT steals WhatsApp Backups

An updated version of the Android remote access trojan GravityRAT can steal WhatsApp backup files and can delete files ESET researchers…

2 years ago
Cryptomining campaign targets Linux systems with Go-based CHAOS MalwareCryptomining campaign targets Linux systems with Go-based CHAOS Malware

Cryptomining campaign targets Linux systems with Go-based CHAOS Malware

Researchers spotted a cryptocurrency mining campaign targeting Linux users with Go-based CHAOS malware (Trojan.Linux.CHAOSRAT). In November 2022, Trend Micro researchers…

2 years ago
Australian man charged with creating and selling the Imminent Monitor spywareAustralian man charged with creating and selling the Imminent Monitor spyware

Australian man charged with creating and selling the Imminent Monitor spyware

An Australian national has been charged for the creation and sale of the Imminent Monitor (IM) spyware, which was also used…

3 years ago
A custom PowerShell RAT uses to target German users using Ukraine crisis as baitA custom PowerShell RAT uses to target German users using Ukraine crisis as bait

A custom PowerShell RAT uses to target German users using Ukraine crisis as bait

Researchers spotted a threat actor using a custom PowerShell RAT targeting German users to gain intelligence on the Ukraine crisis.…

3 years ago
Borat RAT, a new RAT that performs ransomware and DDoS attacksBorat RAT, a new RAT that performs ransomware and DDoS attacks

Borat RAT, a new RAT that performs ransomware and DDoS attacks

Cyble researchers discovered a new remote access trojan (RAT) named Borat capable of conducting DDoS and ransomware attacks. Researchers from…

3 years ago
Latest version of Android RAT BRATA wipes devices after stealing dataLatest version of Android RAT BRATA wipes devices after stealing data

Latest version of Android RAT BRATA wipes devices after stealing data

A new version of the BRATA malware implements a functionality to perform a factory reset of the device to wipe…

3 years ago