RustyWater-ShellCode-Dropper

RustyWater ShellCode Dropper RustyWater 代表整个 Static Kitten 组织攻击行动中的主要载荷和骨干。 RustyWater 是一个 Rust 编译的可执行文件（伪装成 reddit.exe，带有虚假的 Cloudflare 图标），被称为 RustyWater（或与 Archer RAT / RUSTRIC 关联），具有强大的 AV/EDR 绕过能力，通过进程注入和基于注册表的持久化实现。 1 - 反分析 Reddit.exe 实现了一个全面的 8...

MuddyWater Launches RustyWater RAT via Spear-Phishing Across Middle East Sectors

The Iranian threat actor known as MuddyWater has been attributed to a spear-phishing campaign targeting diplomatic, maritime, financial, and telecom entities in the Middle East with a Rust-based implant codenamed RustyWater. "The campaign uses icon spoofing and malicious Word documents to deliver...