Filtered by tag: remote access trojan × Clear
Hackers Abuse Cruciferra Malware-as-a-Service to Conceal Infostealers and Remote Access Trojans
Matched: health
Cybercriminals are renting a crypter tool called Cruciferra to hide infostealers and RATs from security software. Priced at $450–$2,000 monthly, it uses 90+ encryption routines, DLL side-loading, sandbox detection, and BYOVD driver attacks to evade defenses. Active since October 2025 and linked to the older KGB cryptor, it has prompted over 700,000 blocked compromise attempts since January 2026, primarily targeting Türkiye, Greece, and Spain. Payloads include AsyncRAT, XWorm, and Agent Tesla.
StealC Malware Returns as New Stadia RAT to Steal Passwords and Secretly Control Windows PCs
Matched: health
The creator of StealC malware has rebranded with a new Windows remote access trojan called Stadia, advertised in October 2026. It combines password theft with hidden desktop control, targeting browsers, crypto wallets, messaging apps, and VPNs. Code analysis confirmed shared components with StealC 3.5. Monthly subscriptions range from $300 to $900, with former StealC customers offered a free Pro trial following June's Operation Endgame infrastructure seizure.
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
Matched: health
A campaign targeting Cambodia is deploying Spark RAT, an open-source remote access trojan, using lure themes including government notices, public health materials, and real estate content. The attack abuses a vulnerable OPSWAT driver to disable security tools, broadening its potential victim pool across individuals and organizations in the region.