KGB RAT Malware Bypasses Windows Defender to Steal Credentials and Control PCs

A Windows remote access trojan called KGB RAT gives attackers a way to spy on infected computers, collect credentials and control a victim’s desktop. The malware is sold as a service and advertised with a “fully undetectable” crypter that its sellers claim can bypass Windows Defender and other antivirus products. That claim should be treated carefully: Group-IB’s report documents the advertised evasion and observed malicious behavior, but does not show that every version can reliably defeat Defender on every system. Analysts and researchers from Group-IB identified and analyzed KGB…