Botconf 2023 Wrap-Up Day #2

And we are still in Strasbourg! The second day started with « From GhostNet to PseudoManuscrypt » by Jorge Rodriguez & Souhail Hammou. PseudoManuscrypt is a recent RAT spotted by Kaspersky in July 2021. It is widely distributed by fake applications, websites and malware loaders. It’s a fork of Gh0st RAT. This one is still relevant today. It became open source in 2008. Written in C++, it allows taking the full control of the infected host, persistent as a …

amp applications audio botconf control distributed dll fake features fork gh0st rat host july kaspersky keyboard loaders malware managers open source persistent rat rodriguez screen shell video websites wrap-up