Auraboros RAT Adds Live Audio, Keylogging, and Cookie Theft via Open C2 Panel

Gbhackers •Mayura Kathir • April 22, 2026

A fully exposed command-and-control (C2) panel for a previously undocumented remote access trojan (RAT) framework dubbed Auraboros, supporting live audio streaming, intensive keylogging, browser credential theft, and multi-cookie hijacking all accessible over the internet with zero authentication. Further inspection revealed “Auraboros C2 Station,” a polished single-page dashboard that immediately loads victim data and live controls without […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Auraboros RAT Exposes Critical Security Flaws with Live Audio and Keylogging Features A newly discovered remote access trojan (RAT) framework named Auraboros has been found to have a fully exposed command-and-control (C2) panel, allowing attackers to access victim data without any authentication. The C2 panel supports live audio streaming, keylogging, and cookie theft, making it highly dangerous for users. Victims are at risk of having their sensitive information compromised, including browser credentials and cookies. The dashboard operates over plain HTTP, which further exacerbates the security risks associated with this RAT. The lack of authentication means that anyone can access the C2 panel, increasing the potential for mass exploitation. This incident highlights significant vulnerabilities in cybersecurity defenses against RATs. As of now, there are no reported patches or mitigations available to address these vulnerabilities. Security professionals are urged to monitor for any signs of exploitation related to Auraboros. 2 sources 64

Extracted Entities

Auraboros RAT Adds Live Audio, Keylogging, and Cookie Theft via Open C2 Panel

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (2)

Malware (1)

MITRE ATT&CK (3)