New Spear Phishing Attack Leveraging Argentine Federal Court Rulings to Covert RAT for Remote Access

A sophisticated spear-phishing campaign is targeting Argentina’s judicial sector by sending ZIP archives that contain a weaponized LNK file which launches PowerShell to run a batch loader that fetches a second-stage payload from GitHub; the final Rust-based RAT performs anti-analysis checks and provides encrypted C2, file exfiltration, credential harvesting, persistence, and the capability to deploy ransomware via modular DLLs, while presenting a convincing decoy court document to avoid detection.