New undetectable Malware CrossRAT targets Windows, Linux and Mac OS systems
A new piece of malware is now targeting your PCs, CrossRAT is the name. This undetectable spying malware is believed to be developed by the Dark Caracal group. CrossRAT can be described as a malicious desktop surveillance tool which targets OSX, Windows, and Linux. Written in Java, this cross-platform malware can take screenshots, manipulate the entire file system, and run random DLLs for secondary infection on Windows.
As per the researchers, the developers of this Trojan are using WhatsApp messages and Facebook group messages to spread it and to redirect the users to the malicious websites and download malicious programs.
CrossRAT, however, doesn’t have any predefined command to activate the keylogger, but it uses the open source Java library ‘jnativehook,’ to check the mouse and keyboard occasions.
CrossRAT which is a desktop surveillance malware is designed with some basic surveillance features which get activated after getting the predefined instructions from C&C server. It first checks the operating system of your PC and then installs accordingly. Next, it assembles the details about the infected system along with the kernel structure.
The Trojan then uses the mechanisms according to the particular operating system and re-executes every time the infected system is rebooted. It further registers itself on the C&C server thereby providing an access to the distant attackers.
As per the researchers, the developers of this Trojan are using WhatsApp messages and Facebook group messages to spread it and to redirect the users to the malicious websites and download malicious programs.
CrossRAT, however, doesn’t have any predefined command to activate the keylogger, but it uses the open source Java library ‘jnativehook,’ to check the mouse and keyboard occasions.
CrossRAT which is a desktop surveillance malware is designed with some basic surveillance features which get activated after getting the predefined instructions from C&C server. It first checks the operating system of your PC and then installs accordingly. Next, it assembles the details about the infected system along with the kernel structure.
The Trojan then uses the mechanisms according to the particular operating system and re-executes every time the infected system is rebooted. It further registers itself on the C&C server thereby providing an access to the distant attackers.
Link Text
