Currently decompiling LabubaRAT with Ghidra. It's taking ages to perform the initial analyzing, probably because of Rust.
https://blackpointcyber.com/blog/labubarat-a-rust-based-remote-access-tool-masquerading-as-nvidia-software/
#malware #rust #RAT #labubaRAT
Daily CyberSecurity
@DailyCyberSecurity@infosec.exchange
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
infosec.exchange
LabubaRAT is a Rust-based remote access tool disguised as NVIDIA software. It supports HTTPS, WebView2, and DNS tunneling for command and control.
#LabubaRAT #Malware #Rust #RAT #ThreatIntel
https://securityonline.info/labubarat/?utm_source=mastodon&utm_medium=jetpack_social
You've seen all posts