[H4ckN3ws]Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access ******* called Gh0st RAT. The campaign, which is primarily aimed at ********-speaking users, employs trojanized NSIS installers masquerading as legitimate like

This is the hidden content, please

• Sign In
• or
• Sign Up

Chrome and

This is the hidden content, please

• Sign In
• or
• Sign Up

Teams, according to Elastic Security Labs. "The

This is the hidden content, please

• Sign In
• or
• Sign Up