QuimaRAT is a new Java-based RAT sold on the dark web as a subscription MaaS platform that targets Windows, Linux, and macOS with modular features and OS-specific capabilities. The sample uses encrypted configuration, single-instance checks, virtualization and analysis detection, persistence, and resilient C2 handshakes, while advertising 70+ modules, AES-256 encryption, and FUD claims. #QuimaRAT #MaaS #ApacheMaven #JNA

Threat actors are luring unsuspecting users into running trojanized gaming utilities that are distributed via browsers and chat platforms to distribute a remote access trojan (RAT). "A malicious downloader staged a portable Java runtime and executed a malicious Java archive (JAR) file named jd-gui.jar," the Microsoft Threat Intelligence team said in a post on X. "This downloader used PowerShell