Spear-Phishing Campaign Abuses Argentine Federal Court Rulings to Deliver Covert RAT
ID: 267b1033-ebf6-5b98-96dc-c993edd3e346
STIX ID: report--267b1033-ebf6-5b98-96dc-c993edd3e346
Feed Name: GBHackers
**Operation Covert Access:** Seqrite Labs documents a targeted spear-phishing campaign against Argentina’s judicial institutions that uses weaponized LNK files and a decoy court PDF to silently deploy a Rust-based RAT with robust anti-analysis checks, C2 communications (default 181.231.253.69:4444), modular post-exploitation features (credential harvesting, DLL-based ransomware/stealer modules), and persistent registry/scheduled-task techniques; IOCs and mitigation recommendations are provided.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
