Telegram-Based Millenium RAT Campaign Infects 60,000 Devices
Overview
A new campaign involving the Millenium RAT, a remote access trojan, has reportedly affected over 62,000 devices across more than 160 countries. Researchers from Group-IB have identified that the malware has been rewritten in C++, making it more sophisticated and harder to detect. This malware primarily spreads through Telegram, which has raised concerns about the platform being exploited for malicious purposes. Users of various devices are at risk, as the trojan could allow attackers to gain unauthorized access and control over their systems. This incident underscores the need for users to be vigilant about the software they install and the links they click, particularly in messaging applications.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Devices infected by Millenium RAT, primarily through Telegram.
- Action Required: Users should avoid downloading unknown applications and be cautious with links shared in messaging apps.
- Timeline: Newly disclosed
Original Article Summary
Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries
Impact
Devices infected by Millenium RAT, primarily through Telegram.
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Newly disclosed
Remediation
Users should avoid downloading unknown applications and be cautious with links shared in messaging apps. Implementing security software that can detect malware may also help mitigate risks.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Malware, Trojan.