Tagged articles

RAT

6 articles · Page 1 of 1

Jul 25, 2026 · Information Security

Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform

Security researchers monitoring an open directory uncovered the full wp2shell platform, a cross‑platform Go RAT supporting 14 CPU architectures that combines a zero‑credential WordPress exploit chain with large‑scale IoT botnet deployments against Ubiquiti, D‑Link and Totolink devices, featuring fileless execution, post‑quantum TLS, and extensive persistence mechanisms.

IoT botnetMITRE ATT&CKRAT

0 likes · 32 min read

Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform

Ubuntu

Apr 2, 2026 · Information Security

Urgent Alert: Axios Supply‑Chain Poisoning Hits 300M Weekly Downloads – Check Your Projects Now

On March 31 2026, malicious versions of the widely used axios library (1.14.1 and 0.30.4) were published after the maintainer's npm account was hijacked, embedding a cross‑platform RAT; the article details the impact, detection steps, remediation, and long‑term hardening measures for affected projects.

CI/CDRATSupply Chain

0 likes · 13 min read

Urgent Alert: Axios Supply‑Chain Poisoning Hits 300M Weekly Downloads – Check Your Projects Now

Code Mala Tang

Mar 31, 2026 · Information Security

How Malicious Axios Versions Hijacked NPM: A Deep Supply‑Chain Attack Analysis

StepSecurity uncovered a sophisticated supply‑chain attack on the popular Axios HTTP client where compromised maintainer credentials were used to publish malicious versions that injected a hidden postinstall RAT, evaded detection, and executed platform‑specific payloads before self‑destructing, prompting detailed forensic and remediation guidance.

Harden-RunnerRATaxios

0 likes · 31 min read

How Malicious Axios Versions Hijacked NPM: A Deep Supply‑Chain Attack Analysis

Black & White Path

Mar 3, 2026 · Information Security

How North Korean APT Used Steganography and Dead‑Drop Resolvers in 26 Malicious npm Packages

In March 2026, researchers uncovered a supply‑chain attack where a North Korean Lazarus‑linked group published 26 typosquatted npm packages that hide C2 commands via Pastebin steganography and deploy a modular RAT through Vercel, prompting detailed mitigation guidance for developers.

Node.js securityRATSteganography

0 likes · 11 min read

How North Korean APT Used Steganography and Dead‑Drop Resolvers in 26 Malicious npm Packages

Sohu Tech Products

Sep 6, 2023 · Information Security

Unveiling DarkComet: In‑Depth Static & Dynamic Analysis of a Delphi RAT

This article provides a comprehensive technical breakdown of the DarkComet remote‑access trojan, covering its classification, Delphi‑based static characteristics, step‑by‑step dynamic behaviors such as hidden startup, file dropping, registry auto‑run, QQ data harvesting, SMS bombing, plus extracted IOCs and practical mitigation recommendations.

DarkCometDelphiIoC

0 likes · 9 min read

Unveiling DarkComet: In‑Depth Static & Dynamic Analysis of a Delphi RAT

Huolala Safety Emergency Response Center

Dec 2, 2022 · Information Security

How to Detect, Contain, and Eradicate the DarkKomet RAT: A Full Incident Response Walkthrough

This article provides a step‑by‑step technical analysis of the DarkKomet remote‑access trojan, covering its capabilities, infection vectors, detection methods using TTP‑driven EDR, containment actions, eradication procedures, root‑cause forensics, and post‑incident recovery measures.

DarkKometEDRRAT

0 likes · 9 min read

How to Detect, Contain, and Eradicate the DarkKomet RAT: A Full Incident Response Walkthrough