Tag: remote access trojan

Proofpoint has uncovered the Cruciferra crypter, an advanced malware delivery service using BYOVD, Process Ghosting, and multiple evasion techniques to deploy Windows malware.

Researchers have uncovered LabubaRAT, a Rust based remote access trojan disguised as NVIDIA software that enables attackers to control Windows systems through multiple communication channels.

Researchers have uncovered Operation DragonReturn, a phishing campaign using fake Indian tax filing utilities to deploy DcRAT and steal sensitive data from taxpayers, finance teams, and tax professionals.

Security researchers have uncovered malicious npm packages linked to North Korea that impersonate Rollup polyfill tools to deliver remote access malware and steal developer credentials and sensitive data.

Kaspersky has uncovered a large scale SEO poisoning campaign that uses fake software websites and ScreenConnect to deploy AsyncRAT, enabling remote access, data theft, and persistent compromise of Windows systems.

DragonForce ransomware operators have been linked to a new Go based remote access trojan called Backdoor.Turn that hides command and control communications through Microsoft Teams relay infrastructure, enabling long term stealthy access to victim networks.

Cybersecurity researchers have identified multiple ClickFix campaigns distributing malware loaders including BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, highlighting evolving attack techniques that leverage social engineering, compromised websites, and fake software updates.

Security researchers discovered malicious Laravel related packages on Packagist that deploy a cross platform remote access trojan affecting Windows, macOS, and Linux systems.

Cybersecurity researchers uncover a supply chain attack where compromised dYdX npm and PyPI packages distributed wallet-stealing malware and remote access trojans, exposing developers and crypto users to major risks.