As cited
Copy frozen at (site build).
threat intel
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools
Spark RAT, an open-source remote access trojan (RAT), is being deployed in Cambodia through campaigns using varied lures including government notices and public health materials. The malware abuses a vulnerable OPSWAT driver to disable security tools on infected systems.
Why it matters: Organizations and individuals in Cambodia face active compromise risk; practitioners should investigate whether Spark RAT or related indicators of compromise (IOCs) appear in their network logs and patch the vulnerable OPSWAT driver immediately.
- Source published
- First seen by Cybersecurity Tracker