The LabubaRAT malware is a Rust-based remote access tool that infiltrates Windows systems by masquerading as legitimate NVIDIA software, enabling attackers to profile the host, evade security tools, execute commands, and proxy traffic. No CVSS score, specific affected versions, fixed version, or workaround are provided in the source article.
LabubaRAT, a previously undocumented Rust-based remote access tool (RAT) masquerading as NVIDIA software that enables post-compromise operations on Windows systems, has been uncovered by Blackpoint Cyber. According to researchers, LabubaRAT creates “a reusable foothold for hands-on activity.” Once deployed, it can profile the host, identify installed security tools, receive operator commands, transfer files, capture screenshots, and proxy network traffic through the affected system. Blackpoint Cyber named the malware LabubaRAT after discovering a “LabubaPanel” title and … More → The post LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software appeared first on Help Net Security .