Remcos RAT: Malware Linked to Sable Squirrel Operations
Remcos RAT is a remote access trojan that has been observed in communications with Sable Squirrel's infrastructure, indicating its use in the…
Tag: RAT
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
The China-linked cybercrime group Silver Fox has been attributed to a new Rust-based remote access trojan (RAT) called MODBEACON. Chinese cybersecurity company…
MODBEACON: Rust-Based Remote Access Trojan
MODBEACON is a Rust-based RAT using gRPC streaming for encrypted C2 communication. It is memory-resident, modular, and uses Xray/V2Ray transport layer. Capabilities…
Remote Utilities: Commercial RAT Used in SCMBANKER Attacks
Remote Utilities is a commercial remote-access tool that is deployed by the SCMBANKER malware to provide hands-on access to victim machines. It…
Quasar RAT: Remote Access Trojan Used in Sable Squirrel Operations
Quasar RAT is a remote access trojan that has been observed communicating with Sable Squirrel's infrastructure. It was found on domains like…
DCRat: Malware Family Found in Sable Squirrel Campaigns
DCRat is a malware family that has been observed in communications with Sable Squirrel's infrastructure, contributing to the threat actor's malicious activities.
New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS
Cybersecurity researchers at LevelBlue have identified a new Java-based remote access trojan (RAT) named QuimaRAT, which is capable of targeting Windows, Linux,…
QuimaRAT: A New Java-Based Cross-Platform Remote Access Trojan
QuimaRAT is a Java-based remote access trojan (RAT) advertised under a malware-as-a-service (MaaS) model, capable of targeting Windows, Linux, and macOS. It…
Quima Control: The Core Remote Administration Tool of the Quima Suite
Quima Control, also known as QuimaRAT, is a remote administration tool with 74 Windows and 46 macOS and Linux modules. It is…
ChocoPoC RAT Targets Researchers via Fake PoC Exploit Repos on GitHub
Attackers are distributing a data-stealing trojan named ChocoPoC through fake proof-of-concept (PoC) exploit repositories on GitHub, specifically targeting vulnerability researchers. The malware,…