KarstoRAT Malware Expands Remote Espionage Capabilities

LevelBlue SpiderLabs researchers discovered KarstoRAT, a remote access trojan spread via a fake Roblox “Blox Fruits” marketplace targeting gamers. KarstoRAT inventories system details, captures running processes, harvests credentials, establishes deep persistence, and provides disruptive remote-control features (text-to-speech, replacing desktop backgrounds, flipping the display, and swapping mouse buttons) to harass and hinder victims.