RST TI Report Digest: 10 Mar 2025
ID: f50e0f48-1c95-5f4a-8bd0-0fdc464d4929
STIX ID: report--f50e0f48-1c95-5f4a-8bd0-0fdc464d4929
Feed Name: RST Cloud Blog
Threat Score
Positive Technologies ESC identified a campaign named "Desert Dexter" targeting Middle Eastern and North African users via Telegram and SEO-poisoning that delivers modified AsyncRAT in malicious RAR archives; the malware disables security, establishes persistence, captures keystrokes and looks for cryptocurrency wallets, with roughly 900 potential victims and extensive IoCs (domains, file URLs, Telegram channels, and many file hashes).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.