Your Cyble Newsletter

Hi Reader

Hi Reader here is your Cyble newsletter for November 29th! This edition of our newsletter aims to share the cybersecurity insights that Cyble Research and Intelligence Labs (CRIL) shared over the past two weeks.    In recent developments, CRIL has recently identified a website called Persian Remote World selling malicious tools, including Remote Access Trojans (RATs), loaders, and crypters. The website offers these malicious tools under different subscription models at varying prices. CRIL also analyzed a new Java-based RAT called Sayler, specifically designed to target Polish-speaking users. Additionally, CRIL has analyzed Trap Stealer, an open-source stealer that can rapidly pilfer sensitive data. Cyble's Global Sensors have captured multiple exploit attempts targeting vulnerable BIG-IP and Citrix NetScaler instances. Cyble also analyzed a modified version of a 'Batman: Arkham City' game installer application that deploys Meterpreter on victim's systems. Finally, CRIL has analyzed Rude Stealer, a Java-based stealer capable of exfiltrating a wide range of information from infected systems.   You can also find our Q3-Ransomware report, where we cover all the key Ransomware updates that we have observed over the past quarter. Keep watching this space for more!   Happy reading! New Persian Remote World Selling a Suite of Malicious Tools CRIL analyzes a new website - Persian Remote World - selling malicious software, including RATs and Malware loaders, for monetary gain.   New Java-Based Sayler RAT Targets Polish-Speaking Users Cyble Research and Intelligence Labs analyzes the New Java-based Sayler RAT, which specifically targets Polish-speaking users.    New Open-Source 'Trap Stealer' Pilfers Data in just 6 Seconds Cyble Research and Intelligence Labs analyzes Trap Stealer, an open-source stealer that can rapidly pilfer sensitive data.     Active Exploitation of Big-IP and Citrix vulnerabilities observed by Cyble Global Sensor Intelligence Network Cyble's Global Sensors capture multiple exploit attempts targeting vulnerable BIG-IP and Citrix NetScaler instances.   Threat Actor Targets 'Batman: Arkham City' Gamers using Meterpreter CRIL analyzes a modified version of a 'Batman: Arkham City' game installer application that deploys Meterpreter on victim's systems.   New Java-Based Rude Stealer abuses DirectX Diagnostic Tool. CRIL analyzes Rude Stealer - a Java-based stealer capable of exfiltrating a wide range of information from infected systems.   Uncovering the new Java-Based SAW RAT's Infiltration Strategy via LNK files CRIL analyzes a new Java-based RAT - SAW that infiltrates users' systems via LNK files. Contact Cyble Inc., 11175 Cicero Drive, Suite 100, Alpharetta, GA 30022, United States, +1 678 379 3241 Unsubscribe Manage preferences