Dossier
remote access trojan
Coverage of remote access trojan in the Nexus archive.
- BTMOB Android malware service generates custom phishing payloads
An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware payloads tailored to phishing lures.
- North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware
North Korea's hacking group APT37 (ScarCruft) conducted a social engineering campaign via Facebook, using friend requests to deliver RokRAT malware. The multi-stage attack exploited trust-building on the platform to deploy a remote access trojan.