Agent Tesla RAT Delivered by Quantum Builder With New TTPs
released on 2022-10-06 @ 07:08:58 PM
Zscaler ThreatLabz has observed a campaign that delivers Agent Tesla, a .NET based keylogger and remote access trojan (RAT) active since 2014, using a builder named “Quantum Builder” sold on the dark web. This campaign features enhancements and a shift toward LNK (Windows shortcut) files when compared to similar attacks in the past.