ExileRAT Malware Targets Tibetan Exile Government

Cisco Talos researchers discovered a politically motivated cyber-espionage campaign targeting the Central Tibetan Administration using a malicious PPSX file exploiting CVE-2017-0199 to deliver ExileRAT. The campaign's command-and-control infrastructure is linked to earlier LuckyCat Android and Windows RATs, and the malware provides extensive data-stealing and remote control capabilities consistent with espionage operations against Tibetan activists.