Tag: remote access trojan
78 articles
APT36 Exclusive: Critical Golang DeskRAT Threat Hits India
Think a phishing email cant threaten national security? In summer 2025, tailored spear-phishing delivered Golang DeskRAT into Indian government networks — a stealthy APT36 tool that turns a single click into a strategic risk.
malware development: Exclusive Risky AI Abuse Exposed
OpenAI says it disrupted three groups misusing ChatGPT to develop malware — from a Russian actor refining a RAT and credential‑stealer to activity tied to China and North Korea — highlighting how easily generative AI can be repurposed for harm. The takedown bought defenders time, but it also raises urgent questions about policing, policy and how to keep powerful tools useful without arming attackers.
Android remote access trojan: Exclusive Risky Threat
“If you can see nothing, they can take everything” — Klopatra is a stealthy new Android remote-access trojan that quietly hijacks phones to steal banking credentials, intercept one-time codes, and automate fraudulent transactions. Stay vigilant: only install apps from trusted stores, scrutinize accessibility and overlay permissions, and push behavioral mobile security and out-of-band authentication to blunt these targeted, modular attacks.
PyPI packages: Risky SilentSync Alert — Must-Have Fix
Cybersecurity researchers found two malicious PyPI packages that delivered the SilentSync RAT to Windows machines, enabling remote command execution, file theft and screen capture. Treat your dependency tree like an attack surface—audit packages, pin versions and lock down CI to stop supply-chain intrusions.
GitHub Pages Risky SEO Attack — Exclusive Warning
Imagine downloading what looks like legitimate software only to find your PC compromised — attackers are using SEO tricks and GitHub Pages to push kkRAT to Chinese-speaking users by creating convincing fake download pages and hijacking search rankings. Fortinet warns this weaponized trust turns routine searches into infection vectors, so stick to vendor sites and double-check every download.
fileless malware: Deadly Exclusive Stealth Threat
Imagine fighting a ghost that leaves no footprint — attackers are running AsyncRAT entirely in memory, hiding behind trusted Windows tools like PowerShell and rundll32. Luckily, better runtime visibility, behavioral EDR and stronger identity controls can help defenders spot and stop these stealthy, fileless intrusions.
ConnectWise ScreenConnect Risky Exploit: Stunning AsyncRAT
Imagine your trusted remote-admin tool becoming the very doorway attackers use to steal credentials and siphon crypto—researchers found ConnectWise ScreenConnect sessions abused to run a fleshless, in-memory VBScript loader that dropped AsyncRAT to harvest keys, keystrokes, and wallets. Harden RMM access, monitor session scripts, and assume compromise—because when legitimate tooling is weaponized, detection needs to get smarter fast.
remote access trojan: Stunning Risky Threat Revealed
One click from a phishing email can now install MostereRAT — a stealthy, modular remote‑access trojan that evolved from banking malware into a plugin‑driven tool for data theft, persistence and lateral movement — proving attackers are turning familiar scams into long‑term, hard‑to‑detect footholds. Protect yourself with multifactor authentication, least‑privilege access, up‑to‑date patching and behavioral detection, because signature‑based defenses alone won’t cut it.
signed Windows kernel driver: Stunning Risky Backdoor
When a Microsoft‑signed WatchDog driver (amsdk.sys) was abused to neuter endpoint defenses and plant ValleyRAT, it proved that a valid signature isn’t a guarantee of safety. This Silver Fox campaign underscores why organizations must stop trusting signatures alone and add behavior‑based controls and tighter vetting for privileged drivers.
Operation HanKook Phantom: Exclusive Dangerous Threat
When colleagues become targets, South Korea’s academic community is facing a stealthy campaign — Operation HanKook Phantom — where ScarCruft (APT37) uses tailored phishing and the RokRAT trojan to siphon research and influence policy debates. Universities must boost basics like MFA, endpoint protection and phishing training to protect open inquiry without closing it off.
supply chain attacks: Risky npm compromise – Must-Have alert
When a trusted npm package—eslint-config-prettier—was hijacked to deliver the Scavenger RAT, it turned the open-source supply chain into an attack highway. Developers and teams must treat dependencies as potential threats: pin versions, enable 2FA, rotate secrets, and hunt for compromises before convenience becomes a vulnerability.
Cybersecurity Threats: Must-Have Defenses for Risky Firms
A recent PureRAT campaign delivered via Ghost Crypt shows how quickly accounting firms’ trusted data can be undermined by stealthy malware and simple human mistakes—so now’s the time to treat cybersecurity as an everyday business priority. Strengthen controls, train staff with realistic phishing drills, and lock down access and backups to stop a single click from becoming a firm‑wide disaster.
AsyncRAT Code Release Drives Global Rise in Malware Threats
When a powerful open-source tool like AsyncRAT falls into the wrong hands, it can quickly transform from a helpful remote admin app into a global malware menace—fueling a surge of cyberattacks that threaten industries worldwide.
New PHP-Based Interlock RAT Targets Industries via FileFix Delivery
A new PHP-based RAT is shaking up cybersecurity by sneaking into web servers through a clever FileFix delivery system—posing a serious challenge for industries used to defending against traditional Windows threats.
Interlock Ransomware Deploys New RAT in Widespread Cyberattack
Interlock ransomware just leveled up—deploying a stealthy new Remote Access Trojan that lets attackers silently steal data and move through networks undetected. It’s a wake-up call for everyone to rethink cybersecurity before it’s too late.
Interlock Ransomware Deploys New RAT in Global Cyberattack Campaign
The Interlock ransomware gang just stepped up their game with a stealthy new RAT that lets them sneak inside networks and stay hidden—making it more crucial than ever to strengthen your defenses before it’s too late.
TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors
TAG-140 deploys DRAT V2 RAT, targeting critical Indian government, defense, and rail sectors to enhance cyber espionage efforts and data theft.
Silver Fox: Chinese Group Deploys Sainbox RAT and Hidden Rootkit via Fake Websites
Chinese group Silver Fox uses fake websites to deploy Sainbox RAT and hidden rootkits, targeting unsuspecting users for cyber espionage.
Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets
Discord invite link hijacking campaign delivers AsyncRAT and Skuld stealer targeting crypto wallets. Learn how cybercriminals exploit vulnerabilities.
Supply chain attack hits Gluestack NPM packages with 960K weekly downloads
Supply chain attack strikes Gluestack’s NPM packages with 960K weekly downloads, exposing vulnerabilities that threaten project security and developer trust.
New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers
New Windows RAT evades detection for weeks by exploiting corrupted DOS and PE headers, showcasing advanced stealth tactics against security measures.
Advanced RAT Uncovered: Malware Analysis Exposes Manipulated Header Techniques
Discover how advanced RAT malware exploits manipulated header techniques to breach systems. Analysis reveals critical tactics behind evolved cyber threats.
Counterfeit Bitdefender Site Deploys Three Malware Tools
Counterfeit Bitdefender site deploys three malware tools, undermining security by compromising systems and exposing sensitive data. Stay vigilant!
Cybercriminals Impersonate Antivirus Website to Distribute Venom RAT and Hijack Crypto Wallets
Cybercriminals impersonate antivirus sites to spread Venom RAT, hijack crypto wallets, and jeopardize user security in the digital realm.