The Judicial Decoy: Sophisticated Rust RAT Infiltrates Argentina’s Federal Courts

A targeted spear-phishing campaign against Argentina's legal infrastructure deploys a Rust-based RAT via a weaponized LNK disguised as a PDF; the multi-stage chain uses a BAT loader and PowerShell bypass to fetch a GitHub-hosted payload that employs extensive anti-VM/anti-debugging checks, establishes a resilient modular C2, and includes commands for persistence, data harvesting/exfiltration, and file operations aimed at long-term infiltration.