Cryptocurrency-Stealing Remote Access Trojan Deployed in Mastra Attack
A cross-platform information stealer deployed as the final payload in the Mastra supply chain attack. It harvests browser history, steals data from…
Tag: RAT
Backdoor.Turn Remote Access Trojan
Backdoor.Turn is a custom Go-based RAT that conceals C2 traffic inside Microsoft Teams relay infrastructure using TURN relays and QUIC sessions, supporting…
AnyDesk Remote Desktop Software
AnyDesk is a remote desktop application used by DeadLock for remote control of compromised hosts. It is a legitimate tool that is…
Gh0st RAT: Remote Access Trojan Used by Multiple Threat Actors
Gh0st RAT is a well-known remote access trojan that has been used by various cybercriminal and state-sponsored groups. It offers extensive remote…
MYRA: Linux Remote Access Trojan
MYRA is a full-featured Linux RAT delivered via a malicious npm package 'apintergrationpost', claiming to be a Node.js integration client for red…
Agent Tesla: Commodity Remote Access Trojan Distributed via Cruciferra
Agent Tesla is a commodity remote access trojan (RAT) that has been distributed through the Cruciferra crypter service. It is used for…
XWorm: Remote Access Trojan Delivered via Cruciferra in SSA-Themed Campaigns
XWorm is a remote access trojan that has been delivered through Cruciferra campaigns, including those impersonating the U.S. Social Security Administration. It…
AsyncRAT: Malware Linked to Sable Squirrel Infrastructure
AsyncRAT is a remote access trojan that has been detected in over 31,000 malware samples communicating with Sable Squirrel's infrastructure, indicating its…