CYFIRMA research provides an analysis of a newly identified Remote Access Trojan, EdskManager RAT, which exhibits stealthy infection mechanisms and covert control using HVNC.
Key Capabilities:
· Multi-stage infection using signed binaries and encrypted config
· HVNC-based hidden window interaction
· Browser extension profiling (Chrome, Edge, Brave)
· Dynamic C2 switching with zlib-compressed communication
· Persistence via Scheduled Tasks, Run Registry keys, and Startup shortcuts
This malware represents a growing threat with advanced evasion and surveillance features. Read our full report to stay informed!
Link to the Research Report: https://www.cyfirma.com/research/edskmanager-rat-multi-stage-malware-with-hvnc-and-evasion-capabilities/

#CyberDefense #CYFIRMA #CYFIRMAresearch #ETLM

#ExternalThreatLandscapeManagement

https://www.cyfirma.com/