Tag: Remote Access Trojan
-
Microsoft Security Blog: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft
Source URL: https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/ Source: Microsoft Security Blog Title: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft Feedly Summary: Microsoft Incident Response uncovered a novel remote access trojan (RAT) named StilachiRAT, which demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. This blog primarily focuses on analysis of the WWStartupCtrl64.dll…
-
The Register: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs
Source URL: https://www.theregister.com/2025/02/12/russias_sandworm_caught_stealing_credentials/ Source: The Register Title: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs Feedly Summary: ‘Near-global’ initial access campaign active since 2021 An initial-access subgroup of Russia’s Sandworm last year wriggled its way into networks within the US, UK, Canada and Australia, stealing credentials and data from “a limited number…
-
Hacker News: Software developers targeted by malware hidden in Python packages
Source URL: https://www.techradar.com/pro/security/software-developers-targeted-by-malware-hidden-in-python-packages Source: Hacker News Title: Software developers targeted by malware hidden in Python packages Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a series of cyberattacks targeting Python developers by the North Korean hacking group Lazarus, under the guise of fake job advertisements. The attackers exploited Python package repositories…