New Auraboros RAT Exposes Live Audio Streaming, Keylogging, and Cookie Hijacking in Open C2 Panel

Cybersecuritynews •Tushar Subhra Dutta • April 22, 2026

A previously undocumented remote access trojan (RAT) framework called Auraboros C2 has surfaced, exposing an alarming level of open access to victim data, live surveillance capabilities, and browser credential theft. The entire command-and-control (C2) dashboard operates over plain HTTP with no login, no token, and no authentication of any kind, making victim data accessible to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Auraboros RAT Exposes Critical Security Flaws with Live Audio and Keylogging Features A newly discovered remote access trojan (RAT) framework named Auraboros has been found to have a fully exposed command-and-control (C2) panel, allowing attackers to access victim data without any authentication. The C2 panel supports live audio streaming, keylogging, and cookie theft, making it highly dangerous for users. Victims are at risk of having their sensitive information compromised, including browser credentials and cookies. The dashboard operates over plain HTTP, which further exacerbates the security risks associated with this RAT. The lack of authentication means that anyone can access the C2 panel, increasing the potential for mass exploitation. This incident highlights significant vulnerabilities in cybersecurity defenses against RATs. As of now, there are no reported patches or mitigations available to address these vulnerabilities. Security professionals are urged to monitor for any signs of exploitation related to Auraboros. 2 sources 64

Extracted Entities

New Auraboros RAT Exposes Live Audio Streaming, Keylogging, and Cookie Hijacking in Open C2 Panel

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (3)