Windows RAT Uses Encrypted HTTP C2 and Registry Persistence After npm Infection

A newly discovered malware campaign is targeting Windows systems through a deceptive package on the npm registry. Disguised as a legitimate CSS build tool, the malicious package quietly installs a full-featured Remote Access Trojan, or RAT, on developer machines. The attack is subtle, well-crafted, and far more dangerous than it first appears. The infection begins […] The post Windows RAT Uses Encrypted HTTP C2 and Registry Persistence After npm Infection appeared first on Cyber Security News.