all InfoSec news
SparkRAT Being Distributed Within a Korean VPN Installer
Malware Analysis, News and Indicators - Latest topics malware.news
AhnLab Security Emergency response Center (ASEC) has recently discovered SparkRAT being distributed within the installer of a certain VPN program. SparkRAT is a Remote Administration Tool (RAT) developed with GoLang. When installed on a user’s system, it can perform a variety of malicious behaviors, such as executing commands remotely, controlling files and processes, downloading additional payloads, and collecting information from the infected system like by taking screenshots.
1. Case of Distribution
The VPN provider, whose installer contained SparkRAT appears to …
ahnlab asec center distributed emergency files golang installer malicious malware analysis program rat remote administration remote administration tool response security sparkrat system tool vpn