New STX RAT Uses Hidden Remote Desktop and Infostealer Features to Evade Detection

Cybersecuritynews •Tushar Subhra Dutta • April 9, 2026

A newly discovered remote access trojan called STX RAT has emerged as a serious cybersecurity threat in 2026, combining hidden remote desktop access with credential-stealing features to quietly compromise targeted machines. The malware gets its name from the Start of Text (STX) magic byte \x02 that it prepends to every message sent to its command-and-control (C2) server—a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

STX RAT Emerges as Advanced Threat in Finance Sector The STX RAT, a previously undocumented remote access trojan, was identified in late February 2026 targeting the finance sector. It employs sophisticated stealth tactics, including multi-stage scripts and encrypted communication, to evade detection. Initial access is gained through malicious VBScript and JScript that download the core payload. Once installed, STX RAT allows attackers to remotely control infected machines and harvest sensitive information. The malware's design suggests ongoing development, with some features not yet operational. eSentire's Threat Response Unit is actively monitoring the situation and has isolated affected systems. Organizations are urged to enhance endpoint protections against script-based attacks. The threat is significant, given its potential for widespread exploitation in financial environments. 5 sources 68

Extracted Entities

New STX RAT Uses Hidden Remote Desktop and Infostealer Features to Evade Detection

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (3)