RATE Group | Researchers uncover a new piece of RAT malware that targets cryptocurrency users
57537
post-template-default,single,single-post,postid-57537,single-format-standard,ajax_fade,page_not_loaded,,qode_grid_1300,side_area_uncovered_from_content,footer_responsive_adv,qode-content-sidebar-responsive,qode-child-theme-ver-1.0.0,qode-theme-ver-13.3,qode-theme-bridge,wpb-js-composer js-comp-ver-7.9,vc_responsive
 

Researchers uncover a new piece of RAT malware that targets cryptocurrency users

Researchers uncover a new piece of RAT malware that targets cryptocurrency users

[ad_1]

Researchers at Zscaler ThreatLabZ have identified a new remote-access trojan (RAT) called Saefko, which retrieves Chrome browser history in a search for cryptocurrency-related activity

The RAT, written in .NET and available for sale on the dark web, also looks for information relating to other activities involving credit cards, business, social media, gaming, and online shopping.

For context, a RAT is a type of malware that features a backdoor, enabling perpetrators to remotely control a device.

By remotely controlling a device, the intruder is able to surreptitiously monitor user behavior, access confidential information, activate a webcam, take screenshots, and format drives, among other things.

Once the RAT infects the device it stays in the background, activating and executing every time the person logs in.

The list of different cryptocurrency categories Saefko searches for include: