Tag: user-mode rootkit

1 Attack Reports | 0 Vulnerabilities

Attack reports

Analyzing OBSCURE#BAT: Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits

A stealthy malware campaign dubbed OBSCURE#BAT has been discovered, utilizing social engineering and deceptive file downloads to trick users into executing obfuscated code. The infection chain deploys a user-mode rootkit that manipulates system processes and registry entries to evade detection and …
social engineering
api hooking
quasarrat
r77 rootkit
2025-04-13
user-mode rootkit
Published: April 13, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports