Novel Java-Based QuimaRAT Targets Windows, macOS, and Linux

QuimaRAT is a Java-based, cross-platform remote access trojan marketed as a subscription MaaS on the dark web; analysis of a sample reveals a modular Maven-built project with embedded JNA native libraries for Windows, Linux, and macOS, an encrypted embedded config, single-instance and anti-analysis checks, OS-specific persistence, resilient C2 (handshake/heartbeat), and a plugin/command framework (23 implemented commands and 212 protocol-only), indicating high flexibility and extensibility for operator abuse.