Collectionrat

CollectionRAT is a newly identified malware, discovered by cybersecurity researchers who traced its origins through reused infrastructure components. This malicious software, short for Malware, is designed to exploit and damage computers or devices, often infiltrating systems via suspicious downloads, emails, or websites unbeknownst to the user. Once inside, it can steal personal information, disrupt operations, or even hold data hostage for ransom. CollectionRAT has standard remote access trojan (RAT) capabilities, which include running arbitrary commands on an infected system, gathering metadata, managing files, and delivering additional payloads. The researchers have linked CollectionRAT to the Jupiter/EarlyRAT malware family, previously associated with the Andariel Advanced Persistent Threat (APT), a subgroup of the notorious Lazarus Group. The North Korean state-sponsored Lazarus Group has been targeting healthcare entities in Europe and the United States, deploying both QuiteRAT and CollectionRAT malwares. They utilized a now-patched vulnerability (CVE-2022-47966) affecting Zoho ManageEngine ServiceDesk for this purpose. The emergence of CollectionRAT marks another addition to the Lazarus Group's arsenal, demonstrating their ongoing threat to global cybersecurity. Authorities have issued warnings about this new malware tool, highlighting its typical RAT functionality that allows attackers to run arbitrary commands among other capabilities. Its discovery underscores the importance of robust cybersecurity measures and the continuous monitoring and analysis of potential threats.