Report
CikaBika Bot RAT uses Discord for command and control
SecurityWeek, citing Darktrace, reports the malware has been distributed through document-themed lures, likely as part of phishing attacks.
TLDR
SecurityWeek, citing Darktrace, reports that CikaBika Bot is a Rust-based remote-access Trojan. A PDF containing a disk image leads victims to a shortcut disguised as a Word document; opening it sets off a process that runs the malware. The RAT uses Discord to receive commands and send reports. Attackers can also use it to compress directories and exfiltrate them through Ngrok.
Combined views
457
1 Source, first seen ago