RAT

highmalware

Malicious Custom GPTs Used as RAT Delivery Lure in ClickFix-Style Campaign

Security researchers report a campaign in which threat actors create and promote malicious Custom GPTs on the OpenAI platform, using legitimate Google domains as lures. The social engineering approach mimics ClickFix tactics, persuading users to execute commands that deploy remote access trojans (RATs) or other malware. No specific CVE or zero-day vulnerability has been identified; the attack relies on user interaction and trust in legitimate AI services.

Dark reading12 minutes ago1 min read

Sponsored ChatGPT Variants Used in ClickFix Attacks to Deploy Remote Access Trojans

highMalware

US Indicts Russian National for Phishing Campaign Targeting Freelancers

A California federal grand jury has unsealed an indictment against a Russian national accused of conducting a phishing campaign that infected freelancers with TVRAT and DarkVNC malware. The operation allegedly compromised approximately 80,000 systems, enabling unauthorized access and data theft.

BleepingComputer27 days ago1 min read

highMalware

E4del and PINHOLE RATs Exploit FTP Banners as Dead Drop Resolvers

A newly identified campaign leverages FTP banners as dead drop resolvers (DDRs) to deliver two previously undocumented remote access trojans, E4del and PINHOLE. Threat actors abuse legitimate FTP services to embed C2 commands within standard banner text, allowing malware to retrieve instructions while blending with normal network traffic. The campaign was reported by The Hacker News on August 25, 2026.

The Hacker Newsabout 1 month ago1 min read

highThreat Intelligence

SilkParasite RAT Campaign Targets Central Asian Organizations

A spear-phishing campaign attributed to a China-nexus group linked to FamousSparrow has been targeting organizations in Central Asia. The attack delivers a flurry of Remote Access Trojans (RATs), providing insight into the geopolitical, technical, and strategic objectives of the country's APT actors. The campaign was reported by Dark Reading on August 19, 2026.

Dark readingabout 1 month ago1 min read

highCyber Attacks

SilkParasite Espionage Campaign Targets Central Asian Governments with Five Novel RATs

A previously unreported cyber espionage operation, tracked as SilkParasite, has been observed targeting government bodies in Central Asia. The intrusion set leverages seven remote access tool (RAT) families, five of which have never been documented publicly: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. The campaign, first identified in late 2025 and reported in August 2026, is assessed to be espionage-focused, aiming to maintain persistent remote access to compromised systems. No specific threat actor attribution or CVE identifiers have been disclosed in the available reporting.

The Hacker Newsabout 1 month ago1 min read

Quick answers

Related Articles

Malicious Custom GPTs Used as RAT Delivery Lure in ClickFix-Style Campaign

Sponsored ChatGPT Variants Used in ClickFix Attacks to Deploy Remote Access Trojans

US Indicts Russian National for Phishing Campaign Targeting Freelancers

E4del and PINHOLE RATs Exploit FTP Banners as Dead Drop Resolvers

SilkParasite RAT Campaign Targets Central Asian Organizations

SilkParasite Espionage Campaign Targets Central Asian Governments with Five Novel RATs