Activity Targeting Crypto Asset Exchangers for Parallax RAT Infection

Around February 2023, JPCERT/CC identified an attack that attempted to infect a crypto asset exchanger with the Parallax RAT malware. This attack attempted to infect employees of the crypto asset exchanger with malware by sending spam emails. This article presents the details of this attack.

Flow of events leading to Parallax RAT infection

Figure 1 shows the flow of this attack. The identified attack starts with a spam email, which urges the user to download a file from a Google …

article asset attack crypto download drive email emails employees events february flow google google drive infect infection link malware malware analysis parallax rat rat rat malware spam spam emails targeting zip