Cybersecurity experts have uncovered a sly cyberattack tactic where hackers deploy Revenge RAT malware hidden within reputable email tools like smtp-validator and Email to SMS to bypass security measures. By exploiting the trust associated with legitimate software, these attackers dramatically increase their infection success. The Revenge RAT stealthily collects extensive system, user, and security data once embedded through a seemingly harmless setup.exe. This facade is furthered as the malware communicates with its command and control server under the guise of harmless blog traffic, evading detection with heightened discretion. Moreover, this malicious network is resilient, featuring backup C2 URLs and employing a file-less strategy through CMSTP evasion, thereby effectively dodging standard antivirus detection. This sophisticated attack underlines the need for vigilant cybersecurity practices in the face of evolving threats.
