Modular RAT Campaign Steals Credentials and Captures Screenshots

Gbhackers •Mayura Kathir • May 8, 2026

A sophisticated spear-phishing campaign, dubbed Operation GriefLure, targeting senior executives in Vietnam and the Philippines with a stealthy modular remote access trojan (RAT). The campaign focuses on high-value organizations, including Viettel Group Vietnam’s largest military-backed telecom provider and St. Luke’s Medical Center (SLMC) in the Philippines, demonstrating a calculated approach to regional cyber-espionage. What sets Operation […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Operation GriefLure: Modular RAT Targets Southeast Asian Executives A sophisticated spear-phishing campaign, named Operation GriefLure, has been identified, targeting senior executives in Vietnam and the Philippines. The campaign employs a modular remote access trojan (RAT) capable of stealing credentials and capturing screenshots. High-value organizations such as Viettel Group and St. Luke’s Medical Center are among the affected entities. The attackers are executing simultaneous operations against Vietnam’s military-linked telecom sector and the Philippine healthcare industry. This campaign highlights a calculated approach to cyber-espionage in the region. The specific tools and techniques used in the attacks have not been disclosed. Current status indicates ongoing activity with significant implications for targeted organizations. Security professionals are advised to remain vigilant and implement robust security measures. 2 sources 71

Extracted Entities

Modular RAT Campaign Steals Credentials and Captures Screenshots

The full story

Extracted Entities

Attack Types (2)

Campaigns (1)

Companies (2)

Countries (2)

MITRE ATT&CK (1)