#remote-access-trojan tag

Information security

New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

Privacy technologies

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

8 months ago

Privacy professionals

TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors

Cryptocurrency

9 months ago

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

Chaos RAT is a new variant of remote access trojan used in attacks on Windows and Linux systems.

Python

10 months ago

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

A malicious PyPI package named discordpydebug disguises itself as a Discord utility while incorporating a remote access trojan.

Roam Research

5 days ago

GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

A new evolution of the GlassWorm campaign enables comprehensive data theft and installs a remote access trojan disguised as a Google Docs extension.

Information security

New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

Privacy technologies

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

8 months ago

Privacy professionals

TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors

9 months ago

Cryptocurrency

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

10 months ago

Python

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials

A malicious npm package impersonating OpenClaw deploys a remote access trojan and steals sensitive data including credentials, crypto wallets, SSH keys, and browser data from infected systems.

Web frameworks

3 weeks ago

Fake Laravel Packages on Packagist Deploy RAT on Windows, macOS, and Linux

Malicious Packagist PHP packages disguised as Laravel utilities distribute a cross-platform remote access trojan enabling full system compromise on Windows, macOS, and Linux.

Information security

fromTheregister

Double whammy: Steaelite RAT bundles data theft, ransomware

Steaelite, a new remote access trojan sold on cybercrime networks, enables double extortion attacks on Windows machines through ransomware, data theft, credential stealing, and live surveillance controlled via a centralized browser-based dashboard.

CRESCENTHARVEST Campaign Targets Iran Protest Supporters With RAT Malware

The campaign exploits recent geopolitical developments to lure victims into opening malicious .LNK files disguised as protest-related images or videos, researchers Subhajeet Singha, Eliad Kimhy, and Darrel Virtusio said in a report published this week. These files are bundled with authentic media and a Farsi-language report providing updates from 'the rebellious cities of Iran.' This pro- protest framing appears to be intended to increase credibility and to attract Farsi-speaking Iranians seeking protest-related information.

Information security

Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware

Attackers compromised dYdX client packages on npm and PyPI to distribute malicious releases that steal wallet credentials and install a remote access trojan.

#android-malware

Information security

Hugging Face exploited to spread Android malware

4 months ago

Information security

RadzaRat trojan deceives unsuspecting Android users

Information security

Hugging Face exploited to spread Android malware

4 months ago

Information security

RadzaRat trojan deceives unsuspecting Android users

Watch out for this fake Windows BSOD - it's actually malware

Cybercriminals use fake BSODs, ClickFix social engineering, and fake CAPTCHAs to trick hospitality workers into running a Russian-linked RAT that enables remote PC takeover.

#phishing

fromTheregister

2 months ago

Information security

Hotel staff tricked into installing malware by bogus BSODs

Information security

Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

fromTheregister

2 months ago

Information security

Hotel staff tricked into installing malware by bogus BSODs

Information security

Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

React2Shell is exploited to deploy stealthy remote-access malware such as KSwapDoor and ZnDoor, enabling encrypted mesh communications, command execution, and file operations.

3 months ago

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

Cybersecurity researchers are calling attention to a new campaign that's leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan (RAT) dubbed PyStoreRAT. "These repositories, often themed as development utilities or OSINT tools, contain only a few lines of code responsible for silently downloading a remote HTA file and executing it via 'mshta.exe,'" Morphisec researcher Yonatan Edri said in a report shared with The Hacker News.

Information security

5 months ago

Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files

A coordinated spear-phishing campaign named PhantomCaptcha used fake Zoom and Cloudflare CAPTCHA pages to deliver a WebSocket-based remote access trojan to Ukraine-related organizations.

Information security

fromSecurityWeek

6 months ago

Threat Actor Infests Hotels With New RAT

RevengeHotels targets hotels to steal guest credit card data via phishing-delivered RATs, adding AI-generated loaders and VenomRAT to achieve persistent access.