Skip to content
ThreatCluster

Auraboros RAT Exposes Critical Security Flaws with Live Audio and Keylogging Features

First seen 22 Apr 2026, 17:15 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •April 22, 2026 at 19:54 UTC
  • •Auraboros RAT features live audio streaming, keylogging, and cookie theft.
  • •The C2 panel is accessible over plain HTTP with no authentication required.
  • •Victim data is at high risk due to the lack of security measures in place.

A newly discovered remote access trojan (RAT) framework named Auraboros has been found to have a fully exposed command-and-control (C2) panel, allowing attackers to access victim data without any authentication. The C2 panel supports live audio streaming, keylogging, and cookie theft, making it highly dangerous for users. Victims are at risk of having their sensitive information compromised, including browser credentials and cookies. The dashboard operates over plain HTTP, which further exacerbates the security risks associated with this RAT. The lack of authentication means that anyone can access the C2 panel, increasing the potential for mass exploitation. This incident highlights significant vulnerabilities in cybersecurity defenses against RATs. As of now, there are no reported patches or mitigations available to address these vulnerabilities. Security professionals are urged to monitor for any signs of exploitation related to Auraboros.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 179d ago How this analysis works

Timeline

2026-04-22
Auraboros RAT discovered with exposed C2 panel.

More articles in this cluster (2)

Following this threat?

Track Auraboros in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed