This trojan malware is being used to steal passwords and spread ransomware

guest · Dec 2, 2019

This trojan malware is being used to steal passwords and spread ransomware
PyXie RAT capabilities include keylogging, stealing login credentials and recording videos
December 2, 2019
https://www.zdnet.com/article/this-...sed-to-steal-passwords-and-spread-ransomware/

A newly discovered hacking campaign by a 'sophisticated cyber criminal operation' is targeting healthcare and education organisations with custom-built, Python-based trojan malware which gives attackers almost control of Windows systems with the ability to monitor actions and steal sensitive data.

Malicious functions of the remote access trojan , dubbed PyXie RAT, include keylogging, credential harvesting, recording video, cookie theft, the ability to perform man-in-the-middle attacks and the capability to deploy other forms of malware onto infected systems.
PyXie RAT has been active since at least 2018 and is highly customised, indicating that a lot of time and resources have gone into building it.

"The custom tooling and the fact it has remained under the radar this long definitely shows a level of obfuscation and stealth in line with a sophisticated cyber criminal operation," Josh Lemos, VP of research and intelligence at Blackberry Cylance told ZDNet.
Click to expand...

"This is a full-featured RAT that can be leveraged for a wide range of goals and the actors will have different motives depending on the target environment. The fact it has been used in conjunction with ransomware in a few environments indicates that the actors may be financially motivated, at least in those instances," said Lemos.
The full extent of the PyXie RAT campaign still isn't certain [...] Aside from likely being a well-resourced cyber criminal group, it's currently unknown who exactly is behind PyXie RAT, but the campaign is still thought to be active.
Click to expand...

BlackBerry Cylance − ThreatVector: Meet PyXie: A Nefarious New Python RAT

Log in or Sign up

This trojan malware is being used to steal passwords and spread ransomware

guest Guest

Log in or Sign up

This trojan malware is being used to steal passwords and spread ransomware

guest Guest

Useful Searches