New CrystalRAT malware adds RAT, stealer and prankware features
CrystalRAT, a new malware-as-a-service that offers remote access, data theft, keylogging, and clipboard hijacking, is being advertised on Telegram.
With a tiered subscription scheme, the virus first surfaced in January. In addition to the Telegram channel, the MaaS was advertised on YouTube through a special marketing channel that highlighted its features. The malware shares several characteristics with WebRAT (Salat Stealer), including the same panel design, Go-based code, and a similar bot-based sales mechanism, according to a paper released today by Kaspersky experts.
Additionally, CrystalX has a long number of prankware features that are intended to irritate users or interfere with their job. CrystalX has a wide range of data theft capabilities, despite its "fun" side.
Accord...