How Evolving RATs Are Redefining Enterprise Security Threats

This report examines the growing threat from stealthy Remote Access Trojans (RATs) — including StilachiRAT, SnowDog, Remcos and Quasar — that use corrupted headers, batch/LNK delivery, PowerShell fileless loaders, living-off-the-land techniques, and LLM-assisted obfuscation to persist, move laterally, and exfiltrate data; it recommends shifting to behavior-based detection, unified telemetry, and stricter controls on native system binaries to reduce dwell time and improve alert quality.