KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims
Group-IB says KGB RAT, an NjRAT-based Windows trojan sold from $150 monthly, steals passwords, spies via webcam, and includes ransomware.
62
Product
Windows Credential Manager
- Mentions · 7d0
- Mentions · 30d2
- All mentions3
- First seenSep 21, 2026
- Last mentioned27d ago
Timeline
3 articles · newest firstKGB RAT Malware Bypasses Windows Defender to Steal Credentials and Control PCs
Group-IB analyzed KGB RAT, a malware-as-a-service trojan based on NjRAT that steals credentials and controls PCs.
50
Hackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords
Hackers are using a Microsoft-signed driver to disable 145 security tools and steal passwords via fake LastPass download pages on GitHub.
78
Appears with
- Microsoftvendor · 3
- NjRATmalware · 2
- Windows Defenderproduct · 2
- KGB RATmalware · 2
- Group-IBorganization · 2
- LastPassvictim · 1
- Telegramproduct · 1
- Steamproduct · 1
- Delphos Labsorganization · 1
- Windowsproduct · 1
- Cloudflarevendor · 1
- Henan Dafeng Softwareorganization · 1
- Discordproduct · 1
- Rapuncelmalware · 1
- GitHubvendor · 1
- GitHubproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.