January 27, 2021
ElectroRAT is a multi-platform remote access trojan that emerged in late 2020. The macOS variant is considered the first significant, and new, piece of malware in the new year. The RAT is written in Golang and has been distributed across various forums and social networks. The trojan targets specific interest areas, for example, financial services and securities trading forums. ElectroRAT has the ability to monitor keystrokes, steal browser credentials, as well as providing multiple remote control options to the attacker (ex: VNC). Many of the features built into ElectroRAT are existing open-source tools. These include ‘Swift-Keylogger’ & ‘OSXvnc’. ElectroRAT retrieves commands via remote Pastebin entries.
The SentinelOne Singularity Platform is capable of detecting and preventing malicious behaviors associated with ElectroRAT.
SentinelOne PartnerOne - America's 2025
⛳️ Last week in Pebble Beach the America's best cybersecurity partners came together for our annual PartnerOne summit. Check out…
Just a Sec: Cybersecurity Unfiltered—Fast, Frank, and From the Front Lines
Welcome to the first-ever Just A Sec, a no-holds-barred, quick-fire monthly livestream. It’s cybersecurity like you’ve never heard it before—unfiltered,…
See how our intelligent, autonomous cybersecurity platform harnesses the power of data and AI to protect your organization now and into the future.