Threat actors launched Operation Silent Watch utilizing the OxtaRAT backdoor for desktop surveillance and remote access for information gathering.
The threat actor targeted independent media dissidents and human rights organizations within Azerbaijan.
The OxtaRAT backdoor supports multiple features and is a polyglot file that combines both AutoIt scripts and images.