PJobRAT makes a comeback, takes another crack at chat apps
Essential information
- Published
- 27/03/2025 21:52
- Modified
- 27/03/2025 22:24
- Tags
- 2025-03-27 android breadcrumbs c2 server code issues domain hosting eio4 github history infostealer pjobrat pjobrat domain pjobrat package pull
- Related entities
- 12 observables, 5 techniques (mitre), 1 malware, 1 others
Description
In the latest campaign, X-Ops researchers found PJobRAT samples disguising themselves as instant messaging apps. In our telemetry, all the victims appeared to be based in Taiwan.