Microsoft has warned of a new Remote Access Trojan (RAT) named StilachiRAT that employs advanced techniques to evade detection and steal sensitive data. The malware gains persistence through the Windows service control manager and targets credentials stored in browsers, digital wallet information, clipboard data, and system information. StilachiRAT is particularly interested in cryptocurrency wallets and allows threat actors to run commands remotely, with capabilities including device restarting, application running, and system suspension.
Ransomware developer who targeted healthcare extradited to U.S.
Rostislav Panev, a dual Russian-Israeli national, was extradited to the U.S. for his role as a developer in the LockBit ransomware group, responsible for over
