HiatusRAT Targets SOHO Routers
Business grade routers are being infected with the HiatusRAT Remote Access Trojan a variant of tcpdump to perform packing capturing and a bash script deployed post-exploitation.
The malicious software opens a listener on port 8816 and sends sensitive information to command-and-control servers.
Data collected includes system network and file information as well as information about the running processes on the infected device.
Featured Resources
View More Resources
blog
Validate What Matters: Simulate Real-World Identity and Privilege Attacks in AD and Entra ID
Identity is the new perimeter. The move to the cloud and remote work creates new security boundaries based on users and services operating across cloud and hybrid environments, making
blog
New Cymulate WAF Rules: Turn Validation Gaps Into Actionable Defense
Yahav Levin, Research Team LeadIdan Sherman, Infosec Researcher Modern web applications are constantly exposed to threats such as SQL injection,
Demo
From Vulnerability to Validation
See how Cymulate connects vulnerabilities to real attack scenarios to validate what’s actually exploitable.