PhantomCaptcha targets Ukraine relief groups with WebSocket RAT in October 2025

The article reports that PhantomCaptcha targets Ukraine relief groups with a WebSocket RAT in October 2025. According to the piece, the operation is carried out by PhantomCaptcha and involves a WebSocket-based remote access tool described as RAT, aimed at Ukrainian relief groups. The timing given for the activity is October 2025, with the headline positioning the campaign within that month.

The content available from the article is focused on this description and does not provide additional technical details within the excerpt provided. As such, the report communicates a targeted cyber threat against relief organisations in Ukraine, attributed to PhantomCaptcha in October 2025, without further corroborating information in the supplied text. The wording emphasises the use of a WebSocket RAT, reinforcing the focus on that particular capability as described in the article headline.