From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat
An analysis of RATHat panels revealed how the malware abuses Gemini to control infected devices and estimate the victims' bank balances.
EXTERNAL
Publications
Public writings and research contributions published outside this blog.
8 RECORDS
NFC Relay Goes Local: How AI Is Accelerating a New Wave of Independent Malware Developers
AI-assisted development helps independent groups build NFC-relay malware, challenging the former dominance of Chinese-speaking developers.
EXTERNAL
Albiriox Exposed: A New RAT Mobile Malware Targeting Global Finance and Crypto Wallets
A MaaS Android RAT pairs VNC device control with overlay theft and targets more than 400 finance and crypto apps.
EXTERNAL
Klopatra: Exposing a New Android Banking Trojan Operation with Roots in Turkey
A Turkish-linked Android banking trojan combines hidden VNC and overlays with native code and Virbox protection.
EXTERNAL
PlayPraetor's Evolving Threat: How Chinese-Speaking Actors Globally Scale an Android RAT
A Chinese-speaking affiliate operation scales an Android RAT campaign past 11,000 infected devices.
EXTERNAL
DroidBot: Insights from a New Turkish MaaS Fraud Operation
A Turkish MaaS RAT combines hidden VNC, overlays, and spyware capabilities over MQTT/HTTPS, targeting 77 entities.
EXTERNAL
BingoMod: The New Android RAT That Steals Money and Wipes Data
An Android RAT steals credentials and SMS for on-device fraud, then can wipe external storage after a transfer.
EXTERNAL
Medusa Reborn: A New Compact Variant Discovered
A new Medusa variant adopts stealth measures to evade detection while retaining its on-device fraud capabilities.
EXTERNAL
No publications match these filters.