Fake installer operation REF1695 earned $9,400 in Monero deploying RATs and miners
by Adam Bream
Fake installers with step-by-step SmartScreen bypass instructions have been deploying RATs and crypto miners since late 2023. Elastic Security Labs tracked 27.88 XMR ($9,392) across four wallets. The operation uses a new .NET implant called CNB Bot alongside PureRAT and …
Read more →