Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

A new campaign is targeting individuals and organizations in Cambodia with a remote access trojan called Spark RAT. The campaign uses various themes to lure victims, including government notices, public health materials, and real estate-related content. Spark RAT is an open-source trojan, and the campaign abuses a vulnerable OPSWAT driver to disable security tools on targeted systems. The diverse range of lure themes suggests an attempt to appeal to a wide range of potential victims. The campaign's use of different topics indicates a broad targeting approach.