Back Reddit

New Moonrise Malware Analysis

Reddit •/u/Deciqher_ • February 28, 2026

I recently analysed a new emerging RAT named Moonrise. Moonrise is a Golang binary that appears to be a remote-control malware tool that lets the attacker keep a live connection to an infected Windows host, send commands, collect information, and return results in real-time. My analysis also suggest surveillance-related features such as keylogging, clipboard monitoring, crypto focused data handling. At the time of the analysis, this was fully undetected by all and any AV solutions. submitted by /u/Deciqher_ [link] [ ]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Emerging Moonrise Malware Identified as Remote Access Tool A new remote access Trojan (RAT) named Moonrise has been identified as a Golang binary that allows attackers to maintain a live connection to infected Windows hosts. The malware features capabilities such as keylogging, clipboard monitoring, and crypto-focused data handling, and at the time of analysis, it was undetected by all antivirus solutions. Both articles detailing the analysis were published on Reddit, with the first on February 26, 2026, and the second on February 28, 2026. 2 sources 31

Extracted Entities

New Moonrise Malware Analysis

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Platforms (1)