Novel remote access trojan CodeRAT uncovered

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

CodeRAT is a remote access trojan (RAT). The malicious operation, which appears to have originated in Iran, employed a Word document with a Microsoft Dynamic Data Exchange (DDE) exploit to target Farsi-speaking software developers