New SugarGh0st RAT targets Uzbekistan government and South Korea

• Cisco Talos recently discovered a malicious campaign that likely started as early as August 2023, delivering a new remote access trojan (RAT) we dubbed “SugarGh0st.” 


• We found evidence suggesting the threat actor is targeting the Uzbekistan Ministry of Foreign Affairs and users in South Korea. 


• We assess with high confidence that the SugarGh0st RAT is a new customized variant of Gh0st RAT, an infamous trojan that’s been active for more than a decade, with customized commands to facilitate the remote …

access actor august campaign cisco cisco talos found government high korea malicious rat remote access remote access trojan south south korea talos targeting threat threat actor trojan uzbekistan