Splunk Unmasks New Malware Campaign Pairing Ghost RAT with CloverPlus Adware

The Splunk Threat Research Team describes a dual-purpose malware campaign that uses an obfuscated loader to deploy Ghost RAT (a persistent backdoor with privilege escalation, VM checks, hosts/DNS manipulation, and RDP keylogging to capture credentials) alongside CloverPlus adware to monetize victims, detailing execution via rundll32, registry persistence, and other defense-evasion techniques.