Orcus RAT – Computer Security Articles

A week in security (November 11 – 17)

November 18, 2019 admin a week in security, CTNT, cybercrime tactics & techniques, cybercrime tactics and techniques, cybersecurity, Infrastructure, Orcus RAT, Password, proofpoint, Security, trojans

Credit to Author: Malwarebytes Labs| Date: Mon, 18 Nov 2019 16:43:14 +0000

A roundup of cybersecurity news from November 11 – 17, including Facebook scams, the importance of securing food infrastructure, and our latest CTNT report.

Categories:

A week in security

Tags: CTNT cybercrime tactics & techniques cybercrime tactics and techniques cybersecurity infrastructure Orcus RAT password Proofpoint security Trojans

(Read more…)

The post A week in security (November 11 – 17) appeared first on Malwarebytes Labs.

Independent Krebs

Orcus RAT Author Charged in Malware Scheme

November 13, 2019 admin australian federal police, Blackshades RAT, john revesz, LuminosityLink, NanoCore RAT, Ne'er-Do-Well News, Orcus RAT, orcus technologies, RCMP, Royal Canadian Mounted Police, Taylor Huddleston

Credit to Author: BrianKrebs| Date: Wed, 13 Nov 2019 15:41:17 +0000

In July 2016, KrebsOnSecurity published a story identifying a Toronto man as the author of the Orcus RAT, a software product that’s been marketed on underground forums and used in countless malware attacks since its creation in 2015. This week, Canadian authorities criminally charged him with orchestrating an international malware scheme.

Independent Krebs

Canadian Police Raid ‘Orcus RAT’ Author

April 2, 2019 admin Breadcrumbs, John Rezvesz, Ne'er-Do-Well News, Orcus RAT, RCMP

Credit to Author: BrianKrebs| Date: Tue, 02 Apr 2019 14:50:11 +0000

Canadian police last week raided the residence of a Toronto software developer responsible for authoring and selling “Orcus RAT,” a software product that’s been marketed on underground forums and used in countless malware attacks since its creation in 2015. Its author maintains Orcus is a legitimate Remote Administration Tool that is merely being abused, but security experts say it includes multiple features more typically seen in malware known as a Remote Access Trojan.