RAT Trapped? Luminosity Link Falls Foul of Vermin Eradication Efforts
Summary: Unit 42 reports that LuminosityLink, a commodity remote access tool first seen in April 2015 and sold at luminosity[.]link until July 2017, appears dead after its licensing server went down and Europol published a February 5, 2018 press release describing a UK-led operation against hackers linked to the RAT. Palo Alto Networks collected over 43,000 unique LuminosityLink samples and observed more than 72,000 WildFire submissions from almost 2,500 customers, with observations declining steadily and remaining instances likely cracked versions.
What you should know: Europol's release focuses on the tool's users and omits any mention of its author, and Unit 42 found no reported arrest of the author, so the customers who bought and deployed this RAT remain the subject of an active law enforcement operation.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026