Malware researchers at Triage and ANY.RUN have identified several suspicious behaviors associated with 888 RAT executions:
: It has been used by groups like BladeHawk and Kasablanka in targeted espionage campaigns. These groups often lure victims through social media, disguised as legitimate applications or news updates. Platform Versatility : 888Rat.rar
: Often compiled using AutoIT scripts into PE executables. Malware researchers at Triage and ANY
: It can harvest contacts, access SMS messages, and collect files or photos. : It can harvest contacts, access SMS messages,
: Initially sold for roughly $80–$200 on underground forums, its popularity surged after a "Pro" version was cracked and released for free, making it accessible to a wider range of cybercriminals.
: The malware is designed for active spying, including taking screenshots, recording audio/phone calls, and using the device's camera to take photos.
Soothe