A new malware campaign distributes PyStoreRAT, a modular JavaScript-based Remote Access Trojan, through fake GitHub repositories disguised as OSINT tools and development utilities. The malware uses small Python or JavaScript loaders to download and execute HTA files via mshta.exe, establishing persistence through scheduled
Sort: