When infected, Bladabindi trojan will collect several bits of information about the PC that it got into, including the name of the computer, operating system number, country of the computer, usernames, and OS version.Īlso, this malware is able to target cryptocurrency wallet applications and steal cryptocurrency from PCs. On top of that, njRAT is capable of manipulating the system registry. It allows to kill processes as well as remotely execute and manipulate files. In addition, the malware gives hackers access to the command line on the infected machine.
njRAT allows attackers to activate the webcam, log keystrokes, and steal passwords from web browsers as well as multiple desktop apps. This RAT gives hackers the ability to control the victim’s PC remotely. The highest surge of njRAT trojan attacks was recorded in 2014 in the middle east, which is the most targeted region for this malware.
This malware was detected for the first time in 2013, however, some related RATs have been observed by researchers in 2012. Because of its availability, excess of online tutorials, plenty of information, and a robust core feature set along with several implemented evading techniques made njRAT one of the most widely used RATs in the world. NjRAT, also called Bladabindi and Njw0rm is a remote access trojan that is used to remotely control infected machines.
0 kommentar(er)
