Finance sector hit by new STX RAT with stealthy encrypted comms

The article discusses the emergence of STX RAT, a sophisticated remote access trojan (RAT) recently identified targeting the finance sector. Detected during a deployment attempt in February 2026, STX RAT is characterized by its advanced stealth tactics, using unique communication markers and opportune delivery methods. The malware features multi-stage scripts for execution, in-memory payloads, and various persistence mechanisms, including registry alterations.

Noteworthy is its encrypted communication protocol, enhancing data security, and its ability to evade detection by terminating operations in virtual environments. The malware facilitates extensive remote control, allowing attackers to collect sensitive information and conduct various malicious activities. Researchers are monitoring the threat and have urged organizations to bolster endpoint protections.