BDarkRATMalware
According to Threatray, BDarkRAT is a. NET RAT first discovered in 2019 that Bitter group continues to use until at least 2025.From MISP Galaxy
Last reported 12 days ago, by The Hacker News1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1021.001Remote Desktop Protocol
“…er 2026 Akira ransomware attack undertaken by Huntress found that "the threat actor behind the attack accessed the endpoint via Remote Desktop Protocol (RDP), disabled antivirus, and deployed Rclone for data exfiltration, before deploying the ransomware.”
- T1036Masquerading
“Inside this image lay a shortcut (.lnk) masquerading as a PDF document.”
- T1053.005Scheduled Task
“This process established a scheduled task, deceptively named to appear like a system error to ensure persistence, and beaconed to a remote server.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More“… to India, targeted a European embassy in Asia in June 2026 with a spear-phishing email bearing a FIFA World Cup-themed lure to deliver BDarkRAT.”
Indicators in its reports
named in the reports above- fbijobs[.]govin 1 report
Copy this indicator · defanged
Thanks — we review every report.