Cyber Risks · Krebs on Security

Who’s Behind the Rev Code Web Monitor RAT?

Summary: KrebsOnSecurity reports that RevCode, a Swedish company selling a remote administration tool called WebMonitor, is owned per credit agency Ratsit AB by 28-year-old Alex Yücel, the same name as a Swedish man who pleaded guilty in 2015 to co-creating the Blackshades RAT, used to infect more than half a million computers. WebMonitor, advertised on underground hacking forums and classified as malware by most antivirus firms, offers features including dumping remote memory, retrieving passwords from dozens of email programs, capturing Wi-Fi credentials, and viewing the target's webcam; RevCode was registered in Sweden in 2018, after WebMonitor ads first appeared in hacker forums in mid-2017.

What you should know: A tool marketed as legitimate remote administration software ships with credential theft, memory dumping, and silent-install features, and its owner shares a name and a VAT number with the co-author of Blackshades, which compromised more than half a million machines.

Read the original at Krebs on Security ↗

Topics
Malware
Related