RAT

Researchers have discovered GoSerpent malware targeting Southeast Asian government and diplomatic organizations for long-term cyber espionage and data theft.

A suspected China-linked cyber campaign is using fake Indian Income Tax filing software to deliver DcRAT malware and steal sensitive data from taxpayers and businesses.

Indian scammers use WhatsApp fake ticket alerts to push RAT-infected mParivahan apps, stealing OTPs, spying via camera, and draining banks. Download from official stores, update OS, use antivirus—report to 1930 if hit to stay safe.

New Android RAT on GitHub ("Huckel789/Android-RAT") promises permanent stealth, web-based control from any device, and features like SMS theft, 2FA hijacking, live cams, ransomware—no PC needed. Experts warn of lowered cybercrime barriers; analyze in isolation for defenses.

RevengeHotels (TA558) escalates cyberattacks with AI-crafted loaders delivering VenomRAT malware, targeting Windows users via phishing. The malware features stealth, persistence, and encrypted communication.

Cybersecurity researchers have identified new AsyncRAT variants featuring a disturbing "Screamer" tool for audio manipulation and a USB malware spreader that revives autorun-based infections. Learn about these evolving cyber threats and their implications.

A new campaign by the Silver Fox hacking group uses fake software websites to deliver the Sainbox RAT and Hidden rootkit, targeting Chinese-speaking users. Learn more about this cyber threat.

A new phishing campaign in India exploits wedding invitations to distribute SpyMax RAT malware on Android devices. Learn how to recognize and protect yourself from this sophisticated cyber threat.

North Korean hackers from the Famous Chollima group have launched a new Python-based RAT, PylangGhost, targeting Windows and macOS users in the cryptocurrency sector. Learn about the attack methods and implications.

Cybersecurity researchers have uncovered a new malware campaign leveraging the PureCrypter loader to deliver DarkVision RAT, a commodity remote access trojan with a broad range of malicious capabilities. First identified by Zscaler ThreatLabz in July 2024, the campaign employs a multi-stage attack process, exploiting persistence techniques and targeting Windows systems. DarkVision RAT’s versatility, combined with its low cost, has made it a popular tool for cybercriminals.