THE newly identified SilabRAT Trojan is a sophisticated remote access malware that operates as malware-as-a-service, targeting cryptocurrency by hijacking session credentials. Developed by a known Russian-speaking hacker, it is marketed for $5000 monthly and is spread primarily through email spam.
SilabRAT's capabilities include a hidden virtual network computing (HVNC) feature for undetected control over compromised devices and browser-profile cloning, which allows attackers to replicate victims' browsing contexts, enabling seamless session hijacking. The malware's goal is to steal cryptocurrency by cracking wallet passwords and intercepting transactions through clipboard manipulation.
To defend against such attacks, cybersecurity experts recommend implementing stronger multi-factor authentication, patching software regularly, and enhancing phishing defenses.