Quasar RAT, an open-source remote access trojan, is leveraging DLL side-loading to infiltrate Windows hosts and steal data. The attack begins with an ISO image file, which contains malicious code that is hidden through DLL side-loading. A ‘FileDownloader.exe’ file is injected into the Windows Assembly Registration Tool, which triggers the trojan to establish connections with a remote server and send system information. The likely dissemination method is phishing emails.
United States Charges Developer of LockBit Ransomware Group
Rostislav Panev, a 51-year-old dual Russian-Israeli national, has been extradited to the U.S. for his role as a developer in the LockBit ransomware group. Arrested
