njRAT Pushes Lime Ransomware & Bitcoin Stealer

njRAT Lime Edition is a .NET-based remote access trojan variant observed in the wild that combines remote control, credential and cryptocurrency wallet theft, keylogging, USB worm propagation, bot-killing, DDoS capabilities, and an integrated AES-256 ransomware component that encrypts files with a .lime extension; the report includes configuration excerpts, C2 domains (duckdns), MD5 hashes, and vendor detection names.