KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims
Group-IB says KGB RAT, an NjRAT-based Windows trojan sold from $150 monthly, steals passwords, spies via webcam, and includes ransomware.
Stories per day · 30 days
1 RSS
Relatedgroup-ib2kgb-rat2njrat2rat2credential-theft1cryptoclipper1malware-as-a-service1ransomware1windows1
8 stories, newest first · one card per story
Stories tagged #keylogger
KGB RAT Malware Bypasses Windows Defender to Steal Credentials and Control PCs
Group-IB analyzed KGB RAT, a malware-as-a-service trojan based on NjRAT that steals credentials and controls PCs.
AgtaBackup RAT Uses Fake Microsoft Store Pages and RMM Tools to Hijack Windows Systems
AgtaBackup RAT uses fake Microsoft Store pages and legitimate RMM tools to steal data from Windows systems.
11
Attackers Hid Behind Trusted RMM Software Before Deploying a Full Surveillance RAT
Attackers abuse signed RMM tools via fake Microsoft Store pages to deploy new .NET spyware RAT AgtaBackup with keylogging and browser data theft.
2
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Zimperium details RatHat, a China-linked Android malware using smishing, Accessibility abuse, local ADB self-pairing, and generative AI to persist after uninstall and steal data.
2
Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
ThreatFabric identified Manic, an Android banking malware and spyware targeting Ukrainian and European financial apps with novel offline Wi-Fi mesh data exfiltration via nearby infected devices.
6
New Agent Tesla Malware Variant Boosts Evasion Capabilities
KnowBe4 documented an Agent Tesla v4 campaign using emoji-based code obfuscation to evade detection.
5
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Check Point details StopAndProtect: ~2,000 compromised WordPress sites deliver ClickFix fake-CAPTCHA malware toolkit combining ransomware, credential theft, screenshots, and WhatsApp surveillance.
3