Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain
EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can become a network-wide problem when attackers gain privileged access. The operators used remote scheduled tasks to push malicious installer packages to other systems. Those installers deployed EtherRAT, a remote access […] The post Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain appeared first on Cyber Security News.
EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can become a network-wide problem when attackers gain privileged access. The operators used remote scheduled tasks to push malicious installer packages to other systems. Those installers deployed EtherRAT, a remote access tool built around Node.js that can receive instructions, steal access, and keep running after the initial compromise. Recent reporting on EtherRAT blockchain hiding techniques shows why this design can…
Excerpt shown under the publisher's RSS terms · 84 words · full text and figures are on the publisher's site
Related coverage
Hackers Use ClickFix Prompt to Install MSI Package and Launch Hands-On-Keyboard Attack
Cybersecurity News · Jun 17, 2026
Hackers Disable Endpoint Protection and Deploy Sliver Across Compromised Windows Domain
Cybersecurity News · Sep 8, 2026
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident
METR · Aug 26, 2026
Hackers Use Fake Claude Desktop App to Disable Defender and Install Remote Access Malware
Cybersecurity News · Aug 26, 2026