Malware
MagicRAT
- First Reported
- Dec 11, 2023
- Latest Reported
- Dec 11, 2023
Reported Context (1)
- server is “23wfow02rofw391ng23“, which is the same value that we found during our previous research into MagicRAT. In the case of MagicRAT, the value is encoded as an HTML post. But with DLRAT, it's being posted as Lazarus Uses Telegram-Controlled DLang Malware in Operation Blacksmith
CVE (1)
Malware (4)
People (3)
Threat Actors (4)
MITRE ATT&CK (7)
Vendors (2)
Products (14)
Tools (3)
Industries (4)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.