"The malware control panel offers access to an auto‑builder featuring options such as geo-blocking and anti‑analysis, and allows users to generate compressed and encrypted implants."
"CrystalX RAT supports multiple remote access commands, allowing operators to upload files, browse files, or execute commands."
"Since both the attacker and the victim use the same session, the panel provides a number of buttons to block user input so that the attacker can perform necessary actions unhindered."
CrystalX RAT, a malware-as-a-service, emerged in January as Webcrystal RAT. It features a control panel similar to WebRAT and offers an auto-builder with geo-blocking and anti-analysis options. Written in Go, it connects to a command-and-control server to collect system information and steal credentials from platforms like Discord and Steam. The RAT includes a keylogger, clipboard manipulation, and remote access commands, allowing operators to control the victim's screen and capture audio and video streams.
Read at SecurityWeek
Unable to calculate read time
Collection
[
|
...
]