#rat


Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

May 25, 2026 // 19:10

Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks […]

JDownloader site hacked to replace installers with Python RAT malware

May 9, 2026 // 22:36

The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows and Linux installers, with the Windows payload found […]

Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise

May 8, 2026 // 14:08

A previously undocumented Linux implant codenamed Quasar Linux RAT (QLNX) is targeting developers’ systems to establish a silent foothold as well as facilitate a broad […]

Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs

May 6, 2026 // 11:34

Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (RAT) and a previous undocumented plugin dubbed […]

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

Apr 16, 2026 // 14:10

A “novel” social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a previously undocumented Windows […]

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

Apr 14, 2026 // 13:28

A nascent Android remote access trojan called Mirax has been observed actively targeting Spanish-speaking countries, with campaigns reaching more than 220,000 accounts on Facebook, Instagram, Messenger, […]

CPUID Breach: Trojan CPU-Z/HWMonitor Spread STX RAT Malware

Apr 12, 2026 // 11:10

Cybercriminals targeted CPUID (“cpuid[.]com”), the official website for well-known hardware monitoring programs like CPU-Z, HWMonitor, HWMonitor Pro, and PerfMonitor. For nearly a day, they used […]

GlassWorm malware hides remote access trojan (RAT) via Solana. Steals browser and crypto data.

Mar 25, 2026 // 17:33

Cybersecurity experts have identified a new version of the GlassWorm operation, which now uses a complex structure to steal data and install a remote access […]

Hackers Use Fake OpenClaw npm Package to Deploy RAT on macOS

Mar 9, 2026 // 23:28

A malicious package named openclaw-installer was recently discovered on the npm registry targeting developers by mimicking a legitimate installer for the OpenClaw game engine. Attack Details The package was […]

VOID#GEIST Malware Hits Systems with Multi-Stage RAT Deployment

Mar 6, 2026 // 19:38

VOID#GEIST is a stealthy, multi-stage malware delivery framework identified by Securonix Threat Research in early 2026. It is designed to deploy multiple Remote Access Trojans […]