Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

BotHelper RAT Uses Encrypted Payloads and Live Screen Surveillance to Spy on Windows Users

Cybersecurity NewsSeptember 29, 20265 min read

A newly documented Windows remote access trojan, dubbed BotHelper RAT, gives attackers a quiet way to watch an infected user’s screen and control the device. The malware arrives through a small starter program, hides its main code with encryption, and uses a trusted-looking file name to avoid drawing attention. The attack begins when the starter […] The post BotHelper RAT Uses Encrypted Payloads and Live Screen Surveillance to Spy on Windows Users appeared first on Cyber Security News.

A newly documented Windows remote access trojan, dubbed BotHelper RAT, gives attackers a quiet way to watch an infected user’s screen and control the device. The malware arrives through a small starter program, hides its main code with encryption, and uses a trusted-looking file name to avoid drawing attention. The attack begins when the starter profiles the computer, including its name, user, processor and memory. It then contacts a remote server over HTTPS, bypasses certificate checks, and downloads an encrypted file into memory before decrypting it. The…

Excerpt shown under the publisher's RSS terms · 87 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article