RATs are designed to stealthily infiltrate the victim's computer and remain silent, and thus no particular symptoms are clearly visible on an infected machine. Threat Summary: NameĪvast (Win64:Malware-gen), Combo Cleaner (Trojan.GenericKD.65047571), ESET-NOD32 (A Variant Of Generik.MHCQYZH), Kaspersky (), Microsoft (Trojan:Win32/Casdet!rfn), Full List ( VirusTotal) The stolen data is compressed in a password-protected RAR archive before exfiltration, and the local copy is erased from memory to avoid leaving any traces. Upon detecting a portable device, it scans its contents for documents and voice recordings and, if discovered, copies them to the infected computer for exfiltration to the attacker's server. This can be used for various malicious purposes, including extortion, espionage, identity theft, and financial fraud.Īdditionally, M2RAT has the ability to scan for connected portable devices like smartphones or tablets. In addition, M2RAT's ability to execute commands remotely and take screenshots from the desktop enables cybercriminals to monitor the victim's activity. The keylogging feature of M2RAT allows attackers to record every keystroke made on the infected device, including usernames, passwords, and other confidential information.
The malware uses shared memory sections for commands and data exfiltration, leaving few traces on the infected device.Ĭybercriminals can use M2RAT to gain unauthorized access to an infected computer system and steal sensitive information, such as login credentials, credit card details, personal files, and documents.
M2RAT is a backdoor malware that operates as a remote access trojan (RAT), performing functions such as keylogging, data theft, command execution, and taking screenshots.
0 kommentar(er)
