Windows Help File Distributes AsyncRAT
Microsoft Windows help files (*.chm) were used to distribute variants of the AsyncRAT remote access trojan.
The infection process started with the user executing the chm file causing a blank help window to pop-up while malicious scripts were executed, and the RAT was downloaded from a remote server.
The payload exfiltrated sensitive data over SMTP to the actor's command-and-control servers.
Featured Resources
blog
Proactive Security in Action: What Real-World Gaps Reveal About Cyber Resilience
Today’s threat actors move fast, and reactive security is no longer enough. Most breaches have a common root cause: a
E-book
10 Cybersecurity Exposures You Can’t Afford to Ignore
Lessons from Real-World Exposure Validation Think your defenses are airtight?Even well-funded, mature security programs can leave dangerous gaps. This eBook
blog
Kubernetes Security Best Practices: Insights from Real-World Attack Simulations
Securing Kubernetes in production environments is more than a checkbox exercise. It’s a continuous battle against sophisticated attack vectors. Research