Sagheb RAT

Reported Context (1)

BellaCiao (C#/.NET webshell with Windows service persistence, tested against Defender/Kaspersky/ESET), Sagheb RAT (native code FUD keylogger using TOR routing, steals Firefox and Telegram credentials), and the CloudSek Report Warns of Iranian-Linked Cyber Pre-Positioning Across Gulf Networks

CVE (6)

Malware (2)

People (1)

Threat Actors (11)

Vendors (12)

Products (11)

Tools (2)

Industries (7)

Countries (8)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.