LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Researchers have identified a previously unknown remote access trojan called LabubaRAT, which is written in Rust and disguises itself as NVIDIA software to avoid detection. This trojan creates a persistent presence on compromised Windows hosts, allowing for further malicious activity. Once installed, LabubaRAT can gather information about the host system. The trojan's ability to blend in with its surroundings makes it a potentially significant threat. Blackpoint Cyber researchers analyzed the trojan and its capabilities. LabubaRAT provides a reusable foothold for attackers to conduct hands-on activity.