Escanor RAT

▤ Summary

More precisely, the RAT is being advertised on Dark Web forums and the Telegram social media platform. It should be noted that since it was released for sale on January 26, 2022, the threats initially limited threatening functionality has been expanded considerably. According to their findings, the first versions of the RAT were just a compact HVNC (Hidden Virtual Network Computing) implant, tasked with providing the attackers with remote access to the breached system. So far, victims of the Escanor RAT have been identified all over the world, in countries as far apart as the US, UAE, Egypt, Mexico, Singapore, Canada, Kuwait, Israel and more. The infection vector typically involves weaponized Microsoft Office or Adobe PDF documents.

▦ Linked Companies

EnigmaSoft

$1M to $5M