Rust‑based LabubaRAT hides as NVIDIA runtime to hijack Windows PCs
Blackpoint Cyber uncovered LabubaRAT, a new Rust‑written remote access trojan that pretends to be NVIDIA's container runtime. It can profile security tools, steal files, capture screenshots and proxy traffic via HTTPS, WebView2 or DNS, making it a stealthy, potentially as‑a‑service threat to Windows environments.