Saefko – A new multi-layered RAT that targets cryptocurrency users

guest · Aug 9, 2019

Saefko – Researchers uncover a new piece of RAT malware that targets cryptocurrency users
August 9, 2019
https://thenextweb.com/hardfork/201...at-malware-that-targets-cryptocurrency-users/

Researchers at Zscaler ThreatLabZ have identified a new remote-access trojan (RAT) called Saefko, which retrieves Chrome browser history in a search for cryptocurrency-related activity

The RAT, written in .NET and available for sale on the dark web, also looks for information relating to other activities involving credit cards, business, social media, gaming, and online shopping.
For context, a RAT is a type of malware that features a backdoor, enabling perpetrators to remotely control a device.

By remotely controlling a device, the intruder is able to surreptitiously monitor user behavior, access confidential information, activate a webcam, take screenshots, and format drives, among other things.
Once the RAT infects the device it stays in the background, activating and executing every time the person logs in.
Click to expand...

ThreatLabZ: Saefko: A new multi-layered RAT

It fetches the browser history and searches for particular websites that have been visited by the user and makes a count based on the categories mentioned below. From the counts, the attacker can determine which systems it should target first from all the infected systems.

One online forum has an ad for a cracked Saefko RAT tool as shown below. It is a multi-protocol, multi-operating system remote administration tool that can be used to launch the malware on Windows and Android devices.
Click to expand...

Log in or Sign up

Saefko – A new multi-layered RAT that targets cryptocurrency users

guest Guest

Log in or Sign up

Saefko – A new multi-layered RAT that targets cryptocurrency users

guest Guest

Useful Searches