New Krasue Linux RAT targets telecom companies in Thailand
December 07, 2023
A previously undetected Linux RAT dubbed Krasue has been observed targeting telecom companies in Thailand.
Group-IB researchers discovered a previously undetected Linux remote access trojan called Krasue has been employed in attacks aimed at telecom companies in Thailand.
The Krasue Remote Access Trojan (RAT) has remained undetected since at least 2021 when it was registered on Virustotal. The name “Krasue,” comes from the Thai name of a nocturnal native spirit known throughout Southeast Asian folklore.
The experts have yet to determine the initial infection vector and the scale of the campaign.
Threat actors could propagate the threat by exploiting vulnerabilities in Internet-facing systems, conducting credential brute force attacks, and tricking victims into downloading…
