Beers with Talos Ep. #46 - Privacy Pwnd: ExileRAT and Collecting Bad Karma
Summary: Beers with Talos episode #46 examines threats that cross from privacy violation into classic cybersecurity, citing two cases: ExileRAT, a trojan delivered through malicious Office documents and aimed at supporters of the Tibetan government-in-exile, and Karma, a zero-touch toolkit used by at least one nation-state to remotely surveil essentially all valuable data on targets' iPhones. The episode frames privacy as a fundamental human right, with the discussion continuing in the next episode featuring guest Michelle Dennedy.
What's compelling: A nation-state toolkit that needs no interaction to pull essentially all valuable data off a target's iPhone means the endpoint itself can be the collection platform, and a document-delivered trojan aimed at a specific political community shows malware distribution following the target's affiliations.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026