ctrlINT What the industry said about every indicator, with the quote

DCRatMalware

  • darkcrystal rat

DCRat is a typical RAT that has been around since at least June 2019.From MISP Galaxy

Last reported 28 days ago, by CERT-EU1 report

ATT&CK techniques

1 technique · each with the sentence it comes from
  1. T1684Social Engineering

    “The attackers used fake Booking.com reservation cancellations, social engineering with simulated blue screens of death (BSODs), and trusted MSBuild.exe abuse to deploy DCRat for remote access and secondary payload delivery.”

    CERT-EUGovernment

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each

  1. “….com reservation cancellations, social engineering with simulated blue screens of death (BSODs), and trusted MSBuild.exe abuse to deploy DCRat for remote access and secondary payload delivery.”

    CERT-EUGovernment
    Cyber Brief 26-02 - January 2026

Thanks — we review every report.

Report a wrong match
What is wrong with DCRat here?
No account needed. We do not store your IP address.