The Legend of Adwind: A Commodity RAT Saga in Eight Parts

guest · Sep 18, 2019

The Legend of Adwind: A Commodity RAT Saga in Eight Parts
September 17, 2019
https://unit42.paloaltonetworks.com/the-legend-of-adwind-a-commodity-rat-saga-in-eight-parts/

In early 2012, a developer started selling the first of the Adwind family, Java-based remote access tools (RATs), called “Frutas.” In the ensuing years, it has been rebranded at least seven times. Its other names have included Adwind, UnReCoM, Alien Spy, JSocket, JBifrost, UnknownRat, and JConnectPro.

This blog post documents Adwind RAT family’s beginning as an alleged science project, evolution to become widely available commodity malware, and eventual refinement into a private sale to what appears to be a closed customer base. By developing a technique to isolate cracked versions from licensed samples, we have documented the impact of the availability of free, cracked versions, and identified researcher reporting as a repeated catalyst to recent rebranding.
Click to expand...

Log in or Sign up

The Legend of Adwind: A Commodity RAT Saga in Eight Parts

guest Guest

Log in or Sign up

The Legend of Adwind: A Commodity RAT Saga in Eight Parts

guest Guest

Useful Searches