NanoCore: Remote Access Trojan Used by Sable Squirrel
NanoCore is a remote access trojan that has been identified in malware samples communicating with Sable Squirrel's infrastructure, highlighting its role in…
Tag: RAT
njRAT: Malware Family Found in Sable Squirrel Infrastructure
njRAT is a remote access trojan that has been detected in malware samples communicating with Sable Squirrel's infrastructure, contributing to the threat…
Head Mare Exploits TrueConf Server Flaws to Replace Client Installers with PhantomCore Backdoor
Russian cybersecurity vendor Kaspersky has uncovered a new attack campaign by the threat actor known as Head Mare, targeting unpatched TrueConf videoconferencing…
PhantomCore: Backdoor and RAT Delivered via TrueConf Installers
PhantomCore is a backdoor and remote access trojan (RAT) delivered through poisoned TrueConf client installers. It is part of an attack chain…
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A new campaign has been discovered publishing nearly 800 malicious packages to the npm registry, designed to deliver a cross-platform remote access…
DOUBLECUP Loader-as-a-Service Uses ClickFix and Steganographic PNGs to Deliver CountLoader and DeviceManager RAT
A new Russian loader-as-a-service (LaaS) operation named DOUBLECUP is leveraging ClickFix social engineering lures and steganographic PNG images cached in victims' browsers…
DeviceManager: Python-Based RAT Using EtherHiding
DeviceManager is a modular Python-based remote access trojan distributed via DOUBLECUP. It uses EtherHiding to resolve C2 servers via Ethereum/Polygon smart contracts…
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Cybersecurity researchers have uncovered a sophisticated software supply chain attack targeting users of Alibaba developer tools with a cross-platform remote access trojan…
Cross-Platform RAT Targets Alibaba Developer Tools
A sophisticated cross-platform remote access trojan (RAT) was delivered via malicious npm packages impersonating Alibaba's private packages. The RAT is capable of…
Alibaba Group Targeted in Supply Chain Attack
Alibaba Group's developer tools were targeted in a software supply chain attack via malicious npm packages impersonating private @ali-scoped packages. The attack…