Venom RAT (2020–2023)

[mrwebfeeder]

Behavior: Stealth RAT with credential stealing.
SHA256:

Code:

aef997aacac5ae472ae53bbd428a40b3a7122e3a8530bc7f689a9fbfc7010f12

Mitigation:

• HIPS: block injection to legitimate processes.
  
• Detect remote shell activity.
  
• Reject unknown outbound TCP ports.
  

[CarlosMiller]

Behavior: Stealth RAT with credential stealing.
SHA256:

Code:

aef997aacac5ae472ae53bbd428a40b3a7122e3a8530bc7f689a9fbfc7010f12

Mitigation:

• HIPS: block injection to legitimate processes.
  
• Detect remote shell activity.
  
• Reject unknown outbound TCP ports.
  

This thing is the worst thing that can happen to anyone