Tag: 2025-09-09

3 Attack Reports | 0 Vulnerabilities

Attack reports

The Rise of RatOn: From NFC heists to remote control and ATS

A new Android banking trojan named RatOn has emerged, combining NFC relay attacks with remote access and automated transfer capabilities. Discovered by analysts monitoring the NFSkate threat group, RatOn targets cryptocurrency wallets and banking applications, particularly in the Czech Republic and…
rat
android
cryptocurrency
banking trojan
overlay attacks
nfc relay
2025-09-09
ats
nfskate
raton
Published: September 9, 2025
Downloadable IOCs: 23

Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed

The Gentlemen ransomware group has emerged as a sophisticated threat actor targeting multiple industries across 17 countries, with a focus on the Asia-Pacific region. Their campaign demonstrates advanced capabilities, including the use of custom tools to bypass enterprise endpoint protections, expl…
ransomware
lateral movement
data exfiltration
defense evasion
custom tools
driver abuse
2025-09-09
the gentlemen ransomware
group policy manipulation
enterprise targeting
Published: September 9, 2025
Downloadable IOCs: 0

MostereRAT Deployed AnyDesk/TightVNC for Covert Full Access

A sophisticated phishing campaign targeting Japanese users employs MostereRAT, a Remote Access Trojan that utilizes advanced evasion techniques. The attack chain involves multiple stages, including an Easy Programming Language (EPL) payload, security tool disabling, and mTLS-secured C2 communicatio…
phishing
anydesk
remote access
evasion techniques
2025-09-09
tightvnc
mostererat
epl
mtls
Published: September 9, 2025
Downloadable IOCs: 12
Click here to see more Attack Reports