ClientKing: Rust Implant for Linux and Routers
ClientKing is a Rust implant used by Jewelbug that targets Linux servers and routers. It uses five C&C channels, including a DNS…
Tag: Rust
HelloBackdoor: Rust Implant for File Transfer and Command Execution
HelloBackdoor is a Rust-based implant discovered in systems infected by the HelloNet attack. It enables file uploads and downloads to and from…
Chrome 149-151 Fix 1,442 Flaws, Surpassing Prior 23 Updates Combined
Google has patched a record 1,442 security vulnerabilities across Chrome versions 149, 150, and 151, surpassing the total number of flaws fixed…
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into…
LabubaRAT: A New Rust-Based Remote Access Trojan
LabubaRAT is a previously undocumented Rust-based remote access trojan (RAT) that masquerades as NVIDIA software. It supports multiple communication methods including HTTPS,…
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
The RustDuck botnet has been rewritten in Rust, targeting routers and servers to launch distributed denial-of-service attacks.
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic
The China-linked cybercrime group Silver Fox has been attributed to a new Rust-based remote access trojan (RAT) called MODBEACON. Chinese cybersecurity company…
MODBEACON: Rust-Based Remote Access Trojan
MODBEACON is a Rust-based RAT using gRPC streaming for encrypted C2 communication. It is memory-resident, modular, and uses Xray/V2Ray transport layer. Capabilities…
BlackCat Ransomware: Technical Analysis and Defense
BlackCat ransomware is a cross-platform threat written in Rust, targeting Windows, Linux, and VMware ESXi systems. It uses advanced encryption and data…
AquilaRAT: Remote Access Trojan Used by Eagle Werewolf
AquilaRAT is a remote access Trojan used by Eagle Werewolf, distributed via a Rust dropper masquerading as a Starlink device activation checklist…