As cited
Copy frozen at (site build).
threat intel
A Vietnamese threat actor's shift from PXA Stealer to PureRAT
A Vietnamese threat actor has transitioned from using the PXA Stealer malware to deploying PureRAT, a more sophisticated remote access trojan. This evolution reflects a shift from custom Python-based tools to a .NET-based commodity malware with expanded capabilities.
Why it matters: Organizations tracking Vietnamese threat actors need to update detection signatures and behavioral baselines, as the switch to PureRAT indicates more advanced operational capabilities and persistence techniques that may evade existing defenses.
- Source published
- First seen by Cybersecurity Tracker