Malware, Threat Intelligence

Novel Neptune RAT variant sets sights on Windows

cyber crime assessment , security awareness , malware detection

Hackread reports that Windows devices have been subjected to intrusions deploying an updated iteration of the Neptune RAT malware, which is being touted on GitHub, YouTube, and Telegram as the "most advanced RAT" yet, to facilitate password theft and further malware compromise.

Aside from including a password grabber tool targeting browser- and app-stored credentials and manipulating targeted devices' clipboards, the new Neptune RAT variant has also been integrated with file encryption, ransom note injection, and system component corruption capabilities, according to an analysis from CYFIRMA. Operators have also improved Neptune RAT to include virtual environment checking and registry value modification features for persistence, as well as other modules that allow user account control evasion, email and browser app data exfiltration, and live screen monitoring. Such findings highlighting Neptune RAT's increasing sophistication should prompt organizations to implement not only robust endpoint security but also proactive threat monitoring and detection techniques, said Black Duck Principal Security Consultant Satish Swagram.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds