New malware dispenses RAT droppings

guest · Nov 23, 2021

New malware dispenses RAT droppings
November 23, 2021
https://betanews.com/2021/11/23/new-malware-dispenses-rat-droppings/

A new javascript downloader named 'RATDispenser', distributing eight different Remote Access Trojans, keyloggers and information stealers has been uncovered by HP Wolf Security.

Most worrying is that RATDispenser is only detected by 11 percent of available anti-virus engines, meaning it's able to bypass detection tools and successfully deploy malware in the majority of cases.
Click to expand...

The malware uses several techniques to evade detection that are particularly dangerous. For example, using a JavaScript file that is masquerading as a text file means a user only has to double click on the file to start the malware downloader. The downloader script itself is also obfuscated to hide malicious code avoid detection of malware scanning tools.

"It's particularly concerning to see RATDispenser only being detected by about 11 percent of anti-virus systems, resulting in this stealthy malware successfully deploying on victims’ endpoints in most cases," says Patrick Schlapfer, malware analyst at HP.
Click to expand...

To guard against the attack it's recommended that businesses audit what email attachment file types are allowed by their email gateway and block executable file types that aren't needed. They can also interrupt the execution of the malware by changing the default file handler for JavaScript files, only allowing digitally signed scripts to run, or disabling Windows Script Host (WSH).
Click to expand...

HP Wolf Security: RATDispenser: Stealthy JavaScript Loader Dispensing RATs into the Wild

Threat actors are always looking for stealthy ways of delivering malware without being detected. In this article, we describe how attackers are using an evasive JavaScript loader, that we call RATDispenser, to distribute remote access Trojans (RATs) and information stealers.

With an 11% detection rate, RATDispenser appears to be effective at evading security controls and delivering malware. In total, we identified eight malware families distributed using this malware during 2021. All the payloads were RATs, designed to steal information and give attackers control over victim devices.
Click to expand...

chrisretusn · Nov 24, 2021

I knew it was not about rats, but hey, interesting reading anyway.

Log in or Sign up

New malware dispenses RAT droppings

guest Guest

chrisretusn Registered Member

Log in or Sign up

New malware dispenses RAT droppings

guest Guest

chrisretusn Registered Member

Useful Searches