Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site
Drive-by download campaigns targeting Chinese-speaking Windows users have been reported to employ the "evasive dropper" Gh0stGambit to distribute the remote access trojan known as Gh0st RAT.
The source of these infections is a phony website ("chrome-web[.]com") that distributes malicious installer packages purporting to be Google's Chrome browser. This suggests that individuals who look up the software online are being targeted.
Long-standing malware known as Gh0st RAT has been seen in the wild since 2008. Over time, it has taken on several forms in operations mostly run by cyberespionage groups with ties to China.
In the past, some trojan versions have also been used to install the Hidden open-source rootkit by breaking into MS SQL server instances read more about Gh0st RAT Troj...