PJobRAT

▤ Summary

A spyware threat that was first discovered in 2019 has emerged once more in an attack campaign leveraged against Indian military personal. However, the specific nature of the targets, suggests that the threat actor might be related either to Chine or Pakistan. The main functionality of PJobRAT is to collect and exfiltrate sensitive information from the breached devices. It can gather a wide range of document types - pdf, xls, doc, docx, xlsx, ppt, and pptx and upload them to a remote server. Furthermore, PJobRAT allows the threat actors to record audio and video via the devices microphone and camera.

▦ Linked Companies

EnigmaSoft

$1M to $5M