Technology News and Headlines

NjRAT Runs MassLogger

The long‑standing njRAT remote‑access trojan was observed delivering the credential‑stealing malware MassLogger via its C2 traffic. Using NetworkMiner Professional, analysts decoded PCAP data, extracting screenshots, command parameters and gzip‑compressed executables. The “CloudServices.exe” payload, identified as MassLogger, exfiltrates credentials by emailing them through a compromised SMTP server. Indicators of compromise, including MD5 hashes and C2 addresses, were published for threat‑hunting.