New Windows RAT can be controlled via a Telegram channel

guest · Oct 22, 2020

New Windows RAT can be controlled via a Telegram channel
...more malware being released with control-by-Telegram features
October 22, 2020
https://www.zdnet.com/article/new-windows-rat-can-be-controlled-via-a-telegram-channel/

Security researchers have discovered a new remote access trojan (RAT) being advertised on Russian-speaking underground hacking forums.

Named T-RAT, the malware is available for only $45, and its primary selling point is the ability to control infected systems via a Telegram channel, rather than a web-based administration panel.
It's author claims this gives buyers faster and easier access to infected computers from any location, allowing threat actors to activate data-stealing features as soon as a victim is infected, before the RAT's presence is discovered.

In addition, the RAT can also run terminal commands (CMD and PowerShell), block access to certain websites (such as antivirus and tech support sites), kill processes (security and debug software), and even disable the taskbar and the task manager.
Click to expand...

The use of Telegram as a command and control system has been trending up in recent years, and T-RAT isn't even the first RAT to implement such a model.

Previous ones include RATAttack (uploaded and removed from GitHub in 2017, targeted Windows), HeroRAT (used in the wild, targets Android), TeleRAT (used in the wild against Iranians, targets Android), IRRAT (used in the wild, targets Android), RAT-via-Telegram (available on GitHub, targets Windows), and Telegram-RAT (available on GitHub, targets Windows).
Click to expand...

"There are regular uploads of new T-RAT samples to VirusTotal," Hahn told ZDNet. "I would assume it is in distribution but have no further evidence of it."
But T-RAT isn't the only new RAT offered for sale these days. According to Recorded Future, there's another new RAT advertised on hacking forums called Mandaryna.
Click to expand...

G Data: T-RAT 2.0: Malware control via smartphone

Malware sellers want to attract customers with convenience features. Now criminals can remote control malware during their bathroom routine by just using a smartphone and Telegram app
Click to expand...

EASTER · Oct 22, 2020

Just wow how no one such supposedly stealth communication is far from immune.

The use of Telegram as a command and control system has been trending up in recent years, and T-RAT isn't even the first RAT to implement such a model.

Previous ones include RATAttack (uploaded and removed from GitHub in 2017, targeted Windows), HeroRAT (used in the wild, targets Android), TeleRAT (used in the wild against Iranians, targets Android), IRRAT (used in the wild, targets Android), RAT-via-Telegram (available on GitHub, targets Windows), and Telegram-RAT (available on GitHub, targets Windows).
Click to expand...

Log in or Sign up

New Windows RAT can be controlled via a Telegram channel

guest Guest

EASTER Registered Member

Log in or Sign up

New Windows RAT can be controlled via a Telegram channel

guest Guest

EASTER Registered Member

Useful Searches