Telegram

Back Gbhackers

Gbhackers •Mayura Kathir • March 31, 2026

Hackers are deploying a new Windows malware called ResokerRAT, a Telegram‑based Remote Access Trojan (RAT) that gives attackers stealthy remote control over infected systems. Instead of relying on a traditional command‑and‑control (C2) server, ResokerRAT abuses the Telegram Bot API to receive commands and exfiltrate data, blending in with legitimate encrypted traffic. When the user runs Resoker.exe, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ResokerRAT: New Telegram-Based Remote Access Trojan Targets Windows Systems A new Windows malware named ResokerRAT has emerged, utilizing the Telegram Bot API for communication. This Remote Access Trojan (RAT) allows attackers to remotely control infected systems without relying on traditional command-and-control servers. Instead, it blends in with legitimate encrypted traffic, making detection challenging. The malware is designed to stealthily monitor and exfiltrate data from compromised Windows machines. Currently, there are no specific numbers of affected systems or known CVEs associated with ResokerRAT. The attack method leverages the trusted nature of Telegram, raising concerns about the misuse of widely used communication platforms. As of now, there are no reports of widespread exploitation, but the potential for targeted attacks remains significant. Security professionals are advised to remain vigilant against this emerging threat. 4 sources 49

Extracted Entities

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Platforms (1)

Tools (1)