Alert: Cybercriminals Deploying VCURMS and STRRAT Trojans via AWS and GitHub

A new phishing campaign has been observed delivering remote access trojans (RAT) such as VCURMS and STRRAT by means of a malicious Java-based downloader.
“The attackers stored malware on public services like Amazon Web Services (AWS) and GitHub, employing a commercial protector to avoid detection of the malware,” Fortinet FortiGuard Labs researcher Yurren Wan said.
An unusual aspect of the

access alert amazon amazon web services attackers aws campaign commercial cybercriminals detection downloader fortinet github java malicious malware phishing phishing campaign public public services rat remote access remote access trojans services strrat trojans vcurms web web services