DCRat: keylogging
DarkCrystal RAT (DCRat) profileZscaler documented that DCRat, used in the final stage of BlindEagle’s attack on a government institution in Colombia, offered features such as keylogging and disk access. Zscaler
Recording everything the user types on the keyboard and sending it to the attacker.
A keylogger captures passwords, messages and search text as they are typed. It also yields information that is not saved in the browser or would never be saved. MITRE ATT&CK
Most infostealers run once and do not log keystrokes. This feature is more common in remote access trojans that persist on the device. Zscaler
A hook is placed on the operating system’s keyboard events, or the key state is polled constantly. MITRE ATT&CK
Keys are written to a file together with the window they were typed in.
Records are uploaded to the command and control server at intervals. MITRE ATT&CK
Zscaler documented that DCRat, used in the final stage of BlindEagle’s attack on a government institution in Colombia, offered features such as keylogging and disk access. Zscaler
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy