Bitdefender, a Romanaian Cybersecurity firm, has flushed out a powerful all-in-one toolkit for espionage operations dubbed “RadRAT,” which it became aware of inward Feb this year. The toolkit is an advanced remote access tool that allows amount command over seized computers.
“Buried inward the malware zoo, the threat seems to bring been operational since at to the lowest degree 2015, undocumented past times the query community,” the companionship said inward a post.
RadRAT offers powerful remote access options that allow “unfettered command of the compromised computer, lateral drive across the organisation in addition to rootkit-like detection-evasion mechanisms.”
“Powered past times a vast array of features, this RAT was used inward targeted attacks aimed at exfiltrating information or monitoring victims inward large networked organizations,” the post read.
Apart from its information exfiltration mechanisms, it also features lateral drive mechanisms such equally credentials harvesting, NTLM hash harvesting, retrieving a Windows password, in addition to more, in addition to its command gear upward currently supports 92 instructions.
These commands tin give the axe endure used for diverse malicious purposes, including file or registry operations, information theft operations, network operations, operations on processes, scheme information, propagation, in addition to more.
“Unfortunately, spell our information close the behaviour in addition to technical implementation of this remote access toolkit is complete, nosotros tin give the axe solely justice at the master infection vector, which is most probable a pike phishing electronic mail or an exploit,” the cybersecurity theater wrote inward its whitepaper on the toolkit.
“Buried inward the malware zoo, the threat seems to bring been operational since at to the lowest degree 2015, undocumented past times the query community,” the companionship said inward a post.
RadRAT offers powerful remote access options that allow “unfettered command of the compromised computer, lateral drive across the organisation in addition to rootkit-like detection-evasion mechanisms.”
“Powered past times a vast array of features, this RAT was used inward targeted attacks aimed at exfiltrating information or monitoring victims inward large networked organizations,” the post read.
Apart from its information exfiltration mechanisms, it also features lateral drive mechanisms such equally credentials harvesting, NTLM hash harvesting, retrieving a Windows password, in addition to more, in addition to its command gear upward currently supports 92 instructions.
These commands tin give the axe endure used for diverse malicious purposes, including file or registry operations, information theft operations, network operations, operations on processes, scheme information, propagation, in addition to more.
“Unfortunately, spell our information close the behaviour in addition to technical implementation of this remote access toolkit is complete, nosotros tin give the axe solely justice at the master infection vector, which is most probable a pike phishing electronic mail or an exploit,” the cybersecurity theater wrote inward its whitepaper on the toolkit.
