Babylon RAT Campaign Targets Malaysian Politicians

This report details a targeted campaign (active since July) using malicious ISO files that deploy a PowerShell-driven infection chain to install Babylon RAT on devices belonging to Malaysian political figures and government officials; it provides technical analysis of the wrapper and encrypted payload, C2 infrastructure (IPs and domains), MITRE technique mappings, IoCs (file hashes, LNK/PS1/EXE names, IPs, domains), and mitigation recommendations.