VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch

VectraRAT is a newly documented, full‑stack Malware‑as‑a‑Service available for rent (from $250/month) that combines a Go-based VectraHub operator panel and a native C++ Windows implant using a proprietary MessagePack TCP protocol; it provides HVNC, keylogging, browser credential theft, SOCKS5 proxying, automated credential/file collection and a stealthy UAC bypass, and has been observed in active campaigns delivered via Amadey and ClickFix with multiple corporate Windows victims and exposed control infrastructure.