A New 'It RAT': Stealthy 'Resolver' Malware Burrows In

Morphisec researchers uncovered a phishing campaign delivering a new, sophisticated remote access Trojan dubbed "Resolver RAT" via DLL sideloading of a vulnerable Haihaisoft PDF Reader binary; the malware uses in-memory execution, encrypted strings, randomized C2 timing, control-flow flattening, resource resolver hijacking, and multiple persistence techniques, and has been observed targeting international organizations in healthcare and pharmaceuticals across several countries.