Microsoft Incident Response researchers uncovered a novel remote access trojan (RAT) named StilachiRAT that uses a variety of methods to steal information from target systems, such as:

▫️Digital wallet targeting: Scans for configuration data of 20 different cryptocurrency wallet extensions for the Google Chrome browser.
▫️Credential theft: Extracts and decrypts saved credentials from Google Chrome, gaining access to usernames and passwords stored in the browser.
▫️Clipboard and data collection: Continuously monitors clipboard content, actively searching for sensitive data like passwords and cryptocurrency keys, while tracking active windows and applications.

Microsoft Incident Response researchers uncovered a novel remote access trojan (RAT) that demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. https://t.co/MJARVBz2zd

🚨SlowMist Security Alert🚨

Microsoft Incident Response researchers uncovered a novel remote access trojan (RAT) named #StilachiRAT that uses a variety of methods to steal information from target systems, such as:

➡️Digital wallet targeting: Scans for configuration data of 20… https://t.co/Qykgm61vbK

SlowMist

Microsoft Incident Response researchers uncovered a novel remote access trojan (RAT) named StilachiRAT that uses a variety of methods to steal information from target systems, such as:

▫️Digital wallet targeting: Scans for configuration data of 20 different cryptocurrency wallet extensions for the Google Chrome browser.
▫️Credential theft: Extracts and decrypts saved credentials from Google Chrome, gaining access to usernames and passwords stored in the browser.
▫️Clipboard and data collection: Continuously monitors clipboard content, actively searching for sensitive data like passwords and cryptocurrency keys, while tracking active windows and applications.

https://x.com/slowmist_team/status/1901921386060460122
https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/