Malwarehigh
CRAT wants to plunder your endpoints
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-8291 | Ghostscript Type Confusion Flaw Enables Command Execution via Crafted EPS Files | 7.8 | 97% | KEVPoC ×2 | KEV |
From the original article
13 min read at blog.talosintelligence.com
Cisco Talos has observed a new version of a remote access trojan (RAT) family known as CRAT. Apart from the prebuilt RAT capabilities, the malware can download and deploy additional malicious plugins on the infected endpoint. CRAT has been attributed to the Lazarus APT Group in the past.
By Asheer Malhotra · blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.