Latest RAT news

Fake installers with step-by-step SmartScreen bypass instructions have been deploying RATs and crypto miners since late 2023. Elastic Security Labs tracked 27.88 XMR ($9,392) across four wallets. The operation uses a new .NET implant called CNB Bot alongside PureRAT and …

Hijacked maintainer account pushed two poisoned Axios versions to npm, delivering a cross-platform RAT to macOS, Windows, and Linux. The library has 100 million weekly downloads. Both versions have been removed, but anyone who installed them should assume full compromise.

Fake job interviews on Google Forms are installing the PureHVNC trojan. Malwarebytes found forms impersonating real companies in finance and tech, linking to ZIP files that deploy a multi-stage infection chain with DLL hijacking and crypto wallet theft.