Stan Ghouls Target Uzbekistan and Russia with NetSupport RAT

Kaspersky researchers attribute a fresh campaign to the Stan Ghouls (Bloody Wolf) group targeting organizations in Uzbekistan and Russia using Uzbek-language spear‑phishing PDFs that trick victims into running a malicious JAR loader; the loader installs the legitimate NetSupport RAT to gain full remote control and establishes persistence via startup folder, registry Run key, and a scheduled task. The report notes over 60 victims in the campaign and a curious presence of Mirai-related files on infrastructure linked to the group, raising concerns about potential IoT targeting.