Zumanek Remote Access Trojan Threat Intel Advisory

Indicators of Compromise

Impact

1. RATs let attackers access file systems and operating system functions, leading to full control of the host system.
2. It can deploy keyloggers to steal the credentials from the user. 
3. Crypto wallets can be misused by the threat actors for illicit transactions.
4. By hijacking the host systems’ peripherals like camera, microphone etc, the malware can violate the user’s privacy. 
5. It can also make the host connect to a botnet and carry out attacks on other targets without the affected user’s consent.

Mitigation

1. Download applications from trusted sources.
2. Use spam filters and antivirus programs to detect and filter suspicious emails.
3. Backup your data at regular intervals.
4. Use a firewall, antivirus, or anti-malware software.
5. Use strong passwords.
6. Create awareness among users about such attacks.