GitHub repositories that purport to have proof-of-concept exploits for recently discovered vulnerabilities are now being used to spread the WebRAT malware.
WebRAT is a backdoor with information-stealing capabilities that first surfaced at the start of the year and was previously distributed through pirated software and hacks for games like Roblox, Counter-Strike, and Rust.
WebRAT has the ability to acquire cryptocurrency wallet information and login passwords for Steam, Discord, and Telegram accounts, according to a May report by Solar 4RAYS. Additionally, it can take screenshots and use cameras to spy on victims.
The operators began distributing the malware through carefully constructed repositories in September at the latest, claiming to offer an exploit for multiple vulnerabilities that had been reported in the media read more about WebRAT malware spread via fake vulnerability exploits on GitHub.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.