Cross-Platform RAT Targets Alibaba Developer Tools
A sophisticated cross-platform remote access trojan (RAT) was delivered via malicious npm packages impersonating Alibaba's private packages. The RAT is capable of…
Tag: RAT
Alibaba Group Targeted in Supply Chain Attack
Alibaba Group's developer tools were targeted in a software supply chain attack via malicious npm packages impersonating private @ali-scoped packages. The attack…
Hijacked Hotel Wi-Fi Serves Fake Updates to Deploy CornFlake RAT in CaptiveCrunch Campaign
Microsoft has disclosed a cyber espionage campaign, tracked as CaptiveCrunch, that abuses hijacked hotel Wi-Fi captive portals to deliver a remote access…
CornFlake RAT
Go-based remote access trojan delivered via fake updates in the CaptiveCrunch campaign. It captures screenshots, steals credentials, and provides remote shell access.
Pandora RC: Remote Access Agent Used for Persistence
Pandora RC is a remote access tool used by the attackers to establish remote access to victim machines. It is a legitimate…
SpyNote RAT Used in NFC Relay Attacks
SpyNote is a remote access trojan (RAT) that has been observed in the wild alongside WindRelay in NFC relay attacks. It is…
DEV#POOPER: Remote Access Trojan Family
DEV#POOPER is a malware family that delivers remote access trojans (RATs) via compromised npm packages, often using blockchain-based command-and-control infrastructure.
clientCode: Node.js RAT Payload
clientCode is a heavily obfuscated Node.js remote access trojan (RAT) that uploads files, retrieves JavaScript, collects host details, and reads clipboard data,…
zgRAT: Remote Access Trojan Delivered via Cruciferra in Hospitality-Themed Campaigns
zgRAT is a remote access trojan that has been delivered through Cruciferra campaigns targeting the hospitality and travel industries with themes related…
Remote Access Trojan (RAT) Distributed via GitHub Repositories
Remote access trojans are part of the malware payloads in Operation Muck and Load, a campaign that abuses GitHub repositories to deliver…