Making oRAT Go...Further

Presenter: Patrick Wardle, Founder, Objective-See Foundation

Tied to a recently discovered APT group, oRAT is an intriguing piece of macOS malware. The presenter will provide a comprehensive analysis of this threat but will accomplish this analysis in an unconventional manner. Specifically, he will create a custom command and control server and then simply ask (task?) the right questions to efficiently coerce the malware to reveal its full functionality!

https://www.rsaconference.com/usa/agenda/session/Making%20oRat%20GoFurther

analysis apt command command and control control foundation founder macos macos malware making malware objective-see patrick wardle piece server task threat wardle