Heimadal Security

NOVEMBER 22, 2023

Researchers warn of an increase in NetSupport RAT (Remote Access Trojan) infections impacting education, government, and business services sectors. NetSupport Manager is a remote control and desktop management tool by NetSupport Ltd.

Business Services 86

Business Services Education Software Government 86

Malwarebytes

FEBRUARY 28, 2024

In this blog post, we detail the latest distribution chain related to this malware. At the time, victims who clicked the ad and visited the site were tricked with a download for NetSupport RAT. The infrastructure used in this particular attack was reported to the relevant parties.

Advertising 74

Advertising Malware Software DNS 74

SecureList

DECEMBER 13, 2023

FakeSG “FakeSG” is the name we gave to a new NetSupport RAT distribution campaign. Over the course of time, the attackers have changed the download URL to stay undetected longer. Others emerged more recently, as we discussed in some of our previous blog posts. For an example, look at the image below.

Ransomware 90

Ransomware Passwords Malware Encryption 90

Malwarebytes

SEPTEMBER 5, 2023

In this blog post, we will provide details on one campaign targeting TradingView, a popular platform and app to track financial markets. The attacker's goal is to simply run their program and steal data from victims and then immediately exfiltrate it back to their own server.

Phishing 82

Phishing Malware Advertising Marketing 82

Security Affairs

MAY 7, 2021

The Cuba Ransomware gang has partnered with the crooks behind the Hancitor malware in attacks aimed at corporate networks. As a loader, it has been used to download other malware families, such as Ficker stealer and NetSupport RAT , to compromised hosts. The Hancitor downloader has been around for quite some time already.

Ransomware 115

Ransomware Education Manufacturing Malware 115