RATs and Spam: The Node.JS QRAT
released on 2020-08-25 @ 04:32:40 PM
The Qua or Quaverse Remote Access Trojan (QRAT) is a Java-based RAT that can be used to gain complete control over a system.
Recently, Trustwave encountered more spam campaigns that attempt to spread QRATs. The initial malware contains a subscription account for QHub (user:@qhub-subscription[.]store[.]qua[.]one), a service that offers a single interface to control remote machines.