BestHub
Sign in
Tagged articles

RAT

7 articles · Page 1 of 1
Black & White Path
Black & White Path
Aug 5, 2026 · Information Security

Why the $700‑per‑month Android RAT Is Flooding the Underground Market

Security firm Flare’s analysis of thousands of forum posts reveals that the BTMOB Android remote‑access trojan, originally priced at $700 per month, has evolved from a single‑operator service into a fragmented ecosystem of resale, source‑code sales, and counterfeit versions, with secondary‑market prices up to 13‑times lower than the official rates.

AndroidMalware-as-a-ServiceRAT
0 likes · 10 min read
Why the $700‑per‑month Android RAT Is Flooding the Underground Market
Black & White Path
Black & White Path
Jul 25, 2026 · Information Security

Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform

Security researchers monitoring an open directory uncovered the full wp2shell platform, a cross‑platform Go RAT supporting 14 CPU architectures that combines a zero‑credential WordPress exploit chain with large‑scale IoT botnet deployments against Ubiquiti, D‑Link and Totolink devices, featuring fileless execution, post‑quantum TLS, and extensive persistence mechanisms.

Cross-platformIoT botnetMITRE ATT&CK
0 likes · 32 min read
Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform
Code Mala Tang
Code Mala Tang
Mar 31, 2026 · Information Security

How Malicious Axios Versions Hijacked NPM: A Deep Supply‑Chain Attack Analysis

StepSecurity uncovered a sophisticated supply‑chain attack on the popular Axios HTTP client where compromised maintainer credentials were used to publish malicious versions that injected a hidden postinstall RAT, evaded detection, and executed platform‑specific payloads before self‑destructing, prompting detailed forensic and remediation guidance.

Harden-RunnerMalware AnalysisRAT
0 likes · 31 min read
How Malicious Axios Versions Hijacked NPM: A Deep Supply‑Chain Attack Analysis
Sohu Tech Products
Sohu Tech Products
Sep 6, 2023 · Information Security

Unveiling DarkComet: In‑Depth Static & Dynamic Analysis of a Delphi RAT

This article provides a comprehensive technical breakdown of the DarkComet remote‑access trojan, covering its classification, Delphi‑based static characteristics, step‑by‑step dynamic behaviors such as hidden startup, file dropping, registry auto‑run, QQ data harvesting, SMS bombing, plus extracted IOCs and practical mitigation recommendations.

DarkCometDelphiMalware Analysis
0 likes · 9 min read
Unveiling DarkComet: In‑Depth Static & Dynamic Analysis of a Delphi RAT
Huolala Safety Emergency Response Center
Huolala Safety Emergency Response Center
Dec 2, 2022 · Information Security

How to Detect, Contain, and Eradicate the DarkKomet RAT: A Full Incident Response Walkthrough

This article provides a step‑by‑step technical analysis of the DarkKomet remote‑access trojan, covering its capabilities, infection vectors, detection methods using TTP‑driven EDR, containment actions, eradication procedures, root‑cause forensics, and post‑incident recovery measures.

DarkKometEDRMalware Analysis
0 likes · 9 min read
How to Detect, Contain, and Eradicate the DarkKomet RAT: A Full Incident Response Walkthrough