Sunday 05 July 2026 01:12:00 GMT+02:00
Netcrook
#Telegram C2
Millenium RAT Hides Its Tracks in a Native C++ Build and Telegram-Borne C2
The malware’s latest variant pairs resource-embedded settings with Base64 and XOR obfuscation, making its control plane harder to spot without deeper binary triage.
Millenium RAT’s Windows Push Points to a Cleaner, Harder-to-Hunt Malware Model
Group-IB’s analysis of Millenium RAT v4.* ties 62,289 Windows infections in more than 160 countries to Telegram bot communication, a combination that can blur malicious traffic inside ordinary cloud use.
macOS Malware Finds a Quiet Door in LaunchAgents and a Loud One in AI Triage
A Rust-based implant tied to a DPRK-linked macOS cluster pairs ordinary startup persistence with a Python stealer stage and prompt-injection text aimed at analysts.