ParallaxRAT targets cryptocurrency organizations through phishing emails

Threat Advisories

ParallaxRAT targets cryptocurrency organizations through phishing emails

Threat Level
Attack Report

Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs.

Summary

ParallaxRAT is a remote access Trojan (RAT) that has been distributed through phishing emails since December 2019. Recently, ParallaxRAT has been targeting cryptocurrency organizations. The malware uses injection techniques to hide within legitimate processes, making it difficult to detect. Once it successfully infects a victim’s machine, the attacker can interact with them through Notepad and instruct them to connect to a Telegram channel.