Unidentified RAT Deploys NetSupport RAT in New Malware Delivery Chain
SANS ISC reports an unknown RAT infection that delivered NetSupport Manager RAT via the SmartApeSG ClickFix campaign. The initial RAT communicated with a C2 server on TCP 443 and later dropped malicious NetSupport files, establishing persistence on Windows hosts. Indicators include varied domains, hashes, and C2 IPs.