logo

Spear-Phishing Campaign Abuses Argentine Federal Court Rulings to Deliver Covert RAT

ID: 267b1033-ebf6-5b98-96dc-c993edd3e346

STIX ID: report--267b1033-ebf6-5b98-96dc-c993edd3e346

Feed Name: GBHackers

Threat Score
78/100

Date Published: 2026-01-20

Date Updated: 2026-04-22

Author: Mayura Kathir

...
...

**Operation Covert Access:** Seqrite Labs documents a targeted spear-phishing campaign against Argentina’s judicial institutions that uses weaponized LNK files and a decoy court PDF to silently deploy a Rust-based RAT with robust anti-analysis checks, C2 communications (default 181.231.253.69:4444), modular post-exploitation features (credential harvesting, DLL-based ransomware/stealer modules), and persistent registry/scheduled-task techniques; IOCs and mitigation recommendations are provided.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.