Reverse engineering Rusty Stealer: A Rust-based RAT featuring advanced keylogging, live screen streaming, and aggressive defense evasion (killing Windows Defender and hijacking services) to maintain persistence. Weiterlesen: Rusty-Stealer-Keylogger-Screen-Streaming-Service-Persistence-Defender…
Intelligence View
⚡ tsecurity.de Intelligence
Rusty-Stealer-Keylogger-Screen-Streaming-Service-Persistence-Defender-Evasion-Analysis
Reverse engineering Rusty Stealer: A Rust-based RAT featuring advanced keylogging, live screen streaming, and aggressive defense evasion (killing Windows…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1071TA0011 · Command and Control
Application Layer Protocol (C2)
Mitigation: M1031 Network Intrusion Prevention & Egress Filtering
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 80%
Egress-Filtering einführen, DNS-Monitoring aufrichten, Netzwerk-Logs nach C2-Beacon-Mustern durchsuchen.
T1055TA0005 · Defense Evasion
Process Injection
Mitigation: M1049 Antivirus/EDR Behavior Monitoring
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 78%
EDR-Behavior-Regeln prüfen, Memory-Scans mit YARA fahren, Verdachtsprozesse mit Velociraptor triagen.
Defense Evasion
Command and Control
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
16 Quellen
ZDI-26-852: Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability
15 weitere Quellen
ZZDI: Published Advisoriesvor 18 Std.ZDI-26-860: Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 18 Std.ZDI-26-853: Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability ZZDI: Published Advisoriesvor 18 Std.ZDI-26-866: Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability ZZDI: Published Advisoriesvor 18 Std.ZDI-26-865: Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability ZZDI: Published Advisoriesvor 18 Std.ZDI-26-864: Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability ZZDI: Published Advisoriesvor 18 Std.ZDI-26-862: Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability
+9
13 Quellen
CVE-2026-110186 | IBM Langflow OSS up to 1.12.8 code injection (Nessus ID 375489)
12 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-93680 | IBM Langflow OSS up to 1.12.8 improper authentication (Nessus ID 375489) VVulDB Updatesvor 2 Std.CVE-2026-110193 | IBM Langflow OSS up to 1.12.8 os command injection (Nessus ID 375489) VVulDB Updatesvor 2 Std.CVE-2024-20289 | Cisco NX-OS up to 10.4(2) CLI os command injection (cisco-sa-nxos-cmdinj-Lq6jsZhH / Nessus ID 375488) VVulDB Updatesvor 1 Std.CVE-2022-1292 | Oracle MySQL Workbench up to 8.0.29 os command injection (EUVD-2022-24621 / Nessus ID 208691) VVulDB Updatesvor 1 Std.CVE-2022-1292 | Oracle SD-WAN Edge 9.1.1.3.0 Management os command injection (EUVD-2022-24621 / Nessus ID 208691) VVulDB Updatesvor 1 Std.CVE-2022-2068 | OpenSSL up to 1.0.2ze/1.1.1o/3.0.3 Incomplete Fix CVE-2022-1292 c_rehash os command injection (EUVD-2022-34360 / Nessus ID 211339)
+6
12 Quellen
The best early Black Friday TV deals are all at Best Buy
11 weitere Quellen
ZZDNETvor 4 Std.Best Buy just knocked $900 off this TCL 4K TV and soundbar bundle ahead of Black Friday CCNETvor 2 JahrenDon’t Wait for Black Friday When These Bose Headphones Are Already $190 Off CCNETvor 8 TagenNinja’s 8-in-1 Air Fryer Oven Is $110 Off Ahead of Black Friday, Nearly Matching Its Record-Low Price CCNETvor 3 Std.Black Friday Deals Have Started Early, Like This Ninja Air Fryer at Almost 50% Off Right Now CCNETvor 2 Std.Ninja Is Cooking Up Early Black Friday Deals That Save You Up to 44% Right Now Nnetzwelt.devor 5 Std.iPhone 17 generalüberholt für unter 740 Euro: Warum sich das Angebot schon vor dem Black Friday lohnt
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4317907/malware-trojaner-viren/rusty-stealer-keylogger-screen-streaming-service-persistence-defender-evasion-analysis/