Fake Software Installers Used to Drop RATs and Monero Miners in Long-Running Malware Campaign

A financially motivated threat actor has been running a quiet malware campaign since at least late 2023, tricking users into downloading fake software installers that secretly deliver remote access trojans (RATs) and Monero cryptocurrency miners. The operation, designated REF1695, has remained active for over two years, steadily expanding its toolset while staying under the radar […]

The post Fake Software Installers Used to Drop RATs and Monero Miners in Long-Running Malware Campaign appeared first on Cyber Security News.