Remote Access Trojan

Warning: New Malvertising Campaign Uses Fake Cloudflare Pages to Deliver Malware

• Malware

Warning: New Malvertising Campaign Uses Fake Cloudflare Pages to Deliver Malware

Do Son May 24, 2025 0

Malicious scripts disguised as Cloudflare human verification are embedded in WordPress themes, tricking users into executing PowerShell commands that deliver malware.

Stealthy Remcos RAT Campaign Uses PowerShell to Evade Antivirus Detection

• Malware

Stealthy Remcos RAT Campaign Uses PowerShell to Evade Antivirus Detection

Do Son May 17, 2025 0

Remcos RAT campaign evades antivirus using PowerShell-based in-memory execution. Steals data, bypasses UAC, and avoids detection with stealthy tactics.

Aikido Uncovers Malicious Code in Popular npm Package rand-user-agent

• Malware

Aikido Uncovers Malicious Code in Popular npm Package rand-user-agent

Do Son May 8, 2025 0

Aikido discovers a Remote Access Trojan (RAT) hidden in rand-user-agent, a popular npm package with 45,000 weekly downloads.

CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign

• Malware

CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign

Do Son May 1, 2025 0

Trustwave uncovers a fake CAPTCHA campaign delivering NodeJS backdoors via PowerShell and TryCloudflare, with SOCKS5 tunneling and RAT capabilities.

Discord Used as C2 for Stealthy Python-Based RAT

• Malware

Discord Used as C2 for Stealthy Python-Based RAT

Do Son April 29, 2025 0

Cyfirma uncovers a Python-based RAT using Discord for command and control. It can lock screens, simulate BSOD, move the mouse, and steal data.

DslogdRAT Malware Targets Ivanti Connect Secure via CVE-2025-0282 Zero-Day Exploit

• Malware
• Vulnerability

DslogdRAT Malware Targets Ivanti Connect Secure via CVE-2025-0282 Zero-Day Exploit

Do Son April 26, 2025 0

DslogdRAT malware exploited Ivanti Connect Secure via CVE-2025-0282, using web shells and C2 channels to evade detection and persist in networks.

Unveiling a Multi-Stage Malware Attack: Cloudflare Abuse and AsyncRAT Delivery

• Malware

Unveiling a Multi-Stage Malware Attack: Cloudflare Abuse and AsyncRAT Delivery

Do Son April 23, 2025 0

A deep dive into a sophisticated multi-stage malware attack using Cloudflare to deliver AsyncRAT. Learn how attackers evade detection and compromise systems.

ResolverRAT: New RAT Employs Advanced Evasion Techniques

• Malware

ResolverRAT: New RAT Employs Advanced Evasion Techniques

Do Son April 15, 2025 0

Learn about ResolverRAT, a new remote access trojan using advanced evasion to avoid detection. This malware employs sophisticated techniques.

Neptune RAT: Advanced Malware Targets Windows with Destructive Capabilities

• Malware

Neptune RAT: Advanced Malware Targets Windows with Destructive Capabilities

Do Son April 9, 2025 0

CYFIRMA researchers discovered Neptune RAT, an advanced Remote Access Trojan targeting Windows. Learn about its destructive features, evasion techniques, and distribution methods.

Over 18,000 Devices Compromised in XWorm RAT Builder Campaign

• Malware

Over 18,000 Devices Compromised in XWorm RAT Builder Campaign

Do Son January 28, 2025 0

Beware of the XWorm Remote Access Trojan (RAT) builder attack. Discover how threat actors are targeting inexperienced cybersecurity enthusiasts with this malicious software.

NonEuclid RAT—A Sophisticated Tool in the Cybercrime Arsenal

• Malware

NonEuclid RAT—A Sophisticated Tool in the Cybercrime Arsenal

Do Son January 5, 2025 0

Explore the sophisticated NonEuclid RAT and its evolution in malware sophistication. Discover its ransomware encryption and anti-VM checks.

China-Linked Mustang Panda Targets Vietnamese Entities in Cyber Espionage Campaign

• Cyber Security

China-Linked Mustang Panda Targets Vietnamese Entities in Cyber Espionage Campaign

Do Son June 10, 2024 0

Mustang Panda has been conducting a series of targeted attacks since April 2024, focusing on entities with interests in tax compliance and education

GoTo Meeting Exploited to Deliver Remcos RAT via Rust Shellcode Loader

• Malware

GoTo Meeting Exploited to Deliver Remcos RAT via Rust Shellcode Loader

Do Son May 13, 2024 0

This particular scheme involves the misuse of GoTo Meeting, a popular online meeting platform, to deploy the notorious Remcos Remote Access Trojan

FIN7 Hackers Using Signed Malware and Fake Google Ads to Evade Defenses

• Cyber Security
• Malware

FIN7 Hackers Using Signed Malware and Fake Google Ads to Evade Defenses

Do Son May 9, 2024 0

TRU have uncovered a disturbing trend in FIN7 attacks demonstrating the notorious cybercrime group's evolving tactics for infiltrating systems

npm’s Hidden Threat: The Covert Trojan Lurking in Your Windows System

• Malware

npm’s Hidden Threat: The Covert Trojan Lurking in Your Windows System

Do Son January 21, 2024 0

The subsequent investigation unveiled a sophisticated RAT deployment masquerading as a standard Microsoft update process.

2023 Q3 Threat Report: Alarming Rise in Remote Access Trojan Infiltrations

• Malware

2023 Q3 Threat Report: Alarming Rise in Remote Access Trojan Infiltrations

Do Son November 2, 2023 0

the 2023 Threat Insights Report recently published by HP Wolf Security, a significant surge in campaigns deploying RAT is recorded