Back Feeds.4Sysops

QuimaRAT cross-platform malware targets Windows, macOS, and Linux

Feeds.4Sysops •IT News • July 6, 2026

QuimaRAT is a newly discovered Java-based remote access trojan (RAT) sold as a malware-as-a-service (MaaS) subscription on the dark web. The cross-platform malware targets Windows, macOS, and Linux systems by embedding Java Native Access (JNA) libraries for multiple architectures within a Java SE 8 archive. Subscription prices range from $150 per month to $1,200 for lifetime access, making it broadly accessible to threat actors. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

QuimaRAT Malware Emerges as Cross-Platform Threat via MaaS Model QuimaRAT, a new Java-based remote access trojan (RAT), has been identified as a significant threat targeting Windows, macOS, and Linux systems. Offered as malware-as-a-service (MaaS), it has subscription costs ranging from $150 per month to $1,200 for lifetime access. The malware features a modular architecture, allowing dynamic expansion through encrypted plugins. It employs various persistence methods across different operating systems, including Registry Run keys for Windows and LaunchAgent plist files for macOS. QuimaRAT can execute commands remotely, steal credentials, transfer files, and conduct webcam surveillance, providing extensive control to attackers. Its builder supports multiple output formats, enhancing its adaptability for different environments. The malware's stealth capabilities are particularly notable on Windows and Linux, while macOS users may require admin permissions for certain features. The threat landscape is evolving with this malware's capabilities, posing risks to a wide range of users. 2 sources 62

Extracted Entities

QuimaRAT cross-platform malware targets Windows, macOS, and Linux

The full story

Extracted Entities

Attack Types (2)

Malware (1)

MITRE ATT&CK (1)

Platforms (3)