DesckVB RAT Uses Obfuscated JavaScript and Fileless .NET Loader to Evade Detection

Cybersecuritynews •Tushar Subhra Dutta • April 10, 2026

A new Remote Access Trojan known as DesckVB has been targeting systems in 2026, using obfuscated JavaScript and a fileless .NET loader to stay hidden from traditional security tools. The malware gives attackers full remote control over a victim’s machine, making it a serious threat for individuals and organizations alike. DesckVB RAT starts its infection […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

STX RAT Emerges as Advanced Threat in Finance Sector The STX RAT, a previously undocumented remote access trojan, was identified in late February 2026 targeting the finance sector. It employs sophisticated stealth tactics, including multi-stage scripts and encrypted communication, to evade detection. Initial access is gained through malicious VBScript and JScript that download the core payload. Once installed, STX RAT allows attackers to remotely control infected machines and harvest sensitive information. The malware's design suggests ongoing development, with some features not yet operational. eSentire's Threat Response Unit is actively monitoring the situation and has isolated affected systems. Organizations are urged to enhance endpoint protections against script-based attacks. The threat is significant, given its potential for widespread exploitation in financial environments. 5 sources 68

Extracted Entities

DesckVB RAT Uses Obfuscated JavaScript and Fileless .NET Loader to Evade Detection

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)