Rhadamanthys Malware: Swiss Army Knife of Information Stealers Emerges

The report details active malware activity: Rhadamanthys, an information stealer sold as malware-as-a-service, is rapidly evolving with a modular plugin system, Lua scripting support, clipper functionality to redirect crypto payments, keylogging, and broad credential harvesting across browsers, wallets, and apps; researchers note code- and design-level overlap with Hidden Bee. Separately, Trend Micro analysis shows AsyncRAT abusing the legitimate aspnet_compiler.exe process for stealthy code injection, persistence, wallet discovery and C2 communication using DDNS, highlighting active, customizable malware campaigns and ongoing development by actors distributing these tools.