Hackers Deploy Modular RAT With Credential Theft and Screenshot Capture Capabilities

Cybersecuritynews •Tushar Subhra Dutta • May 8, 2026

A newly identified malware campaign is targeting senior executives and government investigators across Southeast Asia, using a modular Remote Access Trojan capable of stealing credentials, capturing screenshots, and maintaining deep persistence on infected systems. The operation, dubbed Operation GriefLure, is running two simultaneous campaigns hitting Vietnam’s military-linked telecom sector and the Philippine healthcare industry. What […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Operation GriefLure: Modular RAT Targets Southeast Asian Executives A sophisticated spear-phishing campaign, named Operation GriefLure, has been identified, targeting senior executives in Vietnam and the Philippines. The campaign employs a modular remote access trojan (RAT) capable of stealing credentials and capturing screenshots. High-value organizations such as Viettel Group and St. Luke’s Medical Center are among the affected entities. The attackers are executing simultaneous operations against Vietnam’s military-linked telecom sector and the Philippine healthcare industry. This campaign highlights a calculated approach to cyber-espionage in the region. The specific tools and techniques used in the attacks have not been disclosed. Current status indicates ongoing activity with significant implications for targeted organizations. Security professionals are advised to remain vigilant and implement robust security measures. 2 sources 71

Extracted Entities

Hackers Deploy Modular RAT With Credential Theft and Screenshot Capture Capabilities

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Countries (1)

Industries (1)

MITRE ATT&CK (2)