WebRAT malware discovered disguised as bootleg software

WebRAT malware has been found disguised as bootleg software. The outbreak is on the famous web. Github

It is well known, and in many minds, that bootleg software is not true free, but often comes with many unwanted giveaways, especially in the latter, where bootleg software often becomes covert or becomes an impersonation of malware types that take over the victim's machine (RAT or Remote Access Trojan) with the potential to take over and steal data on the machine, as is the case.

According to a report by the website Cyber Security News, a new RAT spread campaign called WebRAT has been detected. The malware, a research team from Solar, a cybersecurity expert firm, says that the malware has disguised itself as bootleg software, including game cheat tools, and patches based on the names of famous software or video games such as Rust, Counter-Strike, and Roblox. In spreading the malware, the hackers behind it use a variety of famous channels, including Repo or Repository, on Github, the Comment Channel. Youtube's to common bootleg software sites

For such malware, the research team says that malware has been distributed to hackers based on underground Internet channels, or the Dark Web, since January 2025. (2025) It is advertised that malware can be used to blackmail victims, including to pretend to notify special operations to raid victims' homes through emergency notice (Swatting). For the spread of malware, hackers rely on the popular video clip platform Youtube by uploading video tutorials using game cheating tools or using software, as well as using download links. The link will lead the victim to the GitHub's bootleg software website or Repo, where the hackers behind the fake files are uploaded.

After installing the file, the malware will steal the data to send it to the hacker (Exfiltration). The data will be a password set for logging in to key software such as Steam, Discord, Telegram, and the Wallet. The malware also has the ability to capture the victim through a webcam, screen monitoring, and complete control of the victim's computer. These data will be taken to blackmail to intimidate, extort money from the victim, or harm the victim by swatting. As mentioned above, and if not bad enough, this malware also has the ability to release other malware into the victim's machine, such as the Cryptominer.

# Welcome 2026 # Take care of yourself # Open budget # Includes IT matters # Trending