New PLAYFULGHOST Malware Hacking Devices To Remotely Capture Audio Recordings

PLAYFULGHOST is a Gh0st RAT variant observed in phishing and SEO-poisoning campaigns that deliver malicious installers and archives; once executed it uses DLL search order hijacking and vulnerable renamed binaries to load payloads. The campaign uses multiple components (BOOSTWAVE, TERMINATOR, QAssist.sys, CHROMEUSERINFO.dll) to evade detection, maintain persistence via registry keys, scheduled tasks, startup items and services, and exfiltrate data including Chrome credentials, keystrokes, screenshots and audio.