Cisco’s Talos security researchers warn of a newly identified attack framework and its associated remote access trojan (RAT) targeting Windows and Linux systems.
The attack framework, known as Alchimist, is implemented in GoLang and is the same as the Insekt RAT that it installs on compromised systems. The attack framework offers a simplified Chinese-language web interface that lets users create and distribute malicious payloads, establish remote connections, run programs on infected computers, and take screenshots.
A reverse proxy targeting macOS (frp), a custom backdoor, and other various off-the-shelf tools were all discovered by Cisco to be part of the observed Alchimist campaign (such as psexec, netcat, and fscan).
Read More: New ‘Alchimist’ Attack Framework Targets Windows, Linux, macOS
For more such updates follow us on Google News ITsecuritywire News. Please subscribe to our Newsletter for more updates.
