Aurora Stealer Leverages Shapeshifting Tactics And Popular Applications To Target Users
A threat actor was discovered mimicking legitimate websites to host and deliver the 9002 RAT, also known as Aurora, Hydraq, and McRat.
Binary padding, system checks, and obfuscation were used in an attempt to evade antivirus software detection.
The malicious software exfiltrates a range of data including system information and data from web browsers, crypto wallets, and certain user directories.
Featured Resources
View More Resources
blog
Handala Hack: From Regional Disruption to Digital Destruction — Why Security Validation Matters Now
After years of battling ransomware and financially motivated threats, security teams must now increase their focus to defend against digital destruction. Iranian-backed Handala Hack highlighted the growing threat with its claimed attacks against a U.S.-based medical equipment maker, with reports of widespread deletion of data
blog
CVE-2026-26117: Hijacking Azure Arc on Windows for Local Privilege Escalation & Cloud Identity Takeover
CVE-2026-26117 lets attackers hijack Azure Arc on Windows, escalate to SYSTEM, and seize the machine’s cloud identity.
Demo
Exposure Validation Demo
Demo of automated offensive simulations validating detection, prevention, and IOC coverage