SeroXen RAT distributed via malicious NuGet package

Threat actors have targeted .NET developers with a malicious NuGet package typosquatting the Pathoschild.Stardew.ModBuildConfig deploying the SeroXen RAT, The Hacker News reports. Attacks commence with a PowerShell script downloading a Windows Batch script, which would then execute code that would eventually prompt distribution of SeroXen RAT, a fileless trojan featuring Quasar RAT, r77 rootkit, and NirCmd command-line tool capabilities, according to a Phylum report.

Source: SC Magazine

 


Date:

Categorie(s):

Tag(s):