Tag: fatalrat

3 Attack Reports | 0 Vulnerabilities

Attack reports

2025 Cloud Threat Hunting and Defense Landscape

The report outlines key cloud security threats for 2025, highlighting exploitation of misconfigurations, cloud abuse, ransomware, credential theft, and third-party risks. Threat actors are increasingly leveraging legitimate cloud services for malicious purposes, including using AI/ML capabilities. …
ransomware
cloud security
acr stealer
threat landscape
credential abuse
fatalrat
lamehug
2026-02-19
ai/ml exploitation
cloud-native attacks
misconfigurations
saltwater
seaside
seaspy
third-party risk
Published: February 19, 2026
Linked vulnerabilities : CVE-2025-0282 (CVSS 9.0), CVE-2024-3400, CVE-2021-26855, CVE-2023-3519, CVE-2021-26858, CVE-2021-26857, CVE-2021-27065, CVE-2025-61882 (CVSS 9.8), CVE-2021-43798, CVE-2023-2868, CVE-2023-7102
Downloadable IOCs: 3

Technical Analysis of kkRAT

A malware campaign targeting Chinese-speaking users has been identified, delivering three types of malware: ValleyRAT, FatalRAT, and kkRAT. The campaign uses fake installer pages to distribute the malware. kkRAT, a new Remote Access Trojan, shares similarities with Ghost RAT and Big Bad Wolf. It em…
valleyrat
byovd
remote access trojan
chinese-speaking
fatalrat
ghost rat
2025-09-10
kkrat
big bad wolf
Published: September 10, 2025
Downloadable IOCs: 0

Operation SalmonSlalom

A sophisticated cyberattack targeting industrial organizations in the Asia-Pacific region has been uncovered. The attackers utilized legitimate Chinese cloud services and a multi-stage payload delivery framework to evade detection. The campaign, named SalmonSlalom, employed techniques such as nativ…
dll sideloading
gh0st rat
moudoor
mydoor
2025-02-26
fatalrat
zegost
simayrat
Published: February 26, 2025
Downloadable IOCs: 160
Click here to see more Attack Reports