Malware
Masol RAT
- First Reported
- Mar 27, 2026
- Latest Reported
- Apr 3, 2026
Reported Context (2)
- CL-STA-1048 deployed diverse tooling—EggStremeFuel, Masol RAT, Gorem RAT, and TrackBak—to bypass XDR and establish footholds. Unit 42 Details Three-Cluster Cyberespionage Campaign Targeting Southeast Asian Government
- additional clusters, CL-STA-1048 and CL-STA-1049, were identified: CL-STA-1048 deployed EggStremeFuel, Masol RAT, EggStreme loader/Gorem RAT and TrackBak stealer; CL-STA-1049 used the Hypnosis loader to deliver Unit 42 Details Three Cyberespionage Clusters Targeting a Southeast Asian Government
Malware (13)
Threat Actors (8)
MITRE ATT&CK (11)
Vendors (1)
Products (8)
Tools (2)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.