#rat


Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Jul 29, 2026 // 10:10

Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching […]

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

Jul 29, 2026 // 07:30

Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan (RAT) associated with the DEV#POPPER […]

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Jul 18, 2026 // 00:23

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. […]

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

Jul 10, 2026 // 16:45

The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecurity company QiAnXin […]

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Jul 2, 2026 // 15:27

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels […]

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Jun 23, 2026 // 12:23

Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT). The list of identified […]

Chinese hackers use new Atlas RAT malware in European cyberattacks

Jun 4, 2026 // 00:56

A Chinese-speaking cybercrime group has expanded its targeting to the European space, deploying previously undocumented malware and the Atlas backdoor. Tracked as TA4922, the threat […]

Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT

Jun 3, 2026 // 19:34

Cybersecurity researchers have flagged a new malspam campaign that makes use of Google’s DoubleClick domain as a way to evade detection and ultimately deliver a […]

Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

Jun 2, 2026 // 12:14

Cybersecurity researchers have disclosed details of a spear-phishing campaign likely undertaken by the Pakistan-aligned SideCopy group targeting Afghanistan’s Ministry of Finance with an open-source remote […]

Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

May 27, 2026 // 19:10

Latin America and Europe become the target of two banking trojan campaigns that are designed to infect Windows and Android devices with Grandoreiro and BTMOB […]