Interlock RAT is a Python-based remote access trojan family that is being distributed through a malicious ad blocker extension.
Interlock RAT is a Python-based remote access trojan family that is being distributed through a malicious ad blocker extension. The campaign uses a component or loader named CrashFix to deliver the RAT payload, illustrating how browser extension ecosystems can be abused to deploy backdoors. This is significant as it showcases Python-based malware delivered via trusted-looking extensions, increasing stealth and reach on Windows hosts.
A malicious campaign named CrashFix has been identified, utilizing a fake ad-blocking browser extension called NexShield to crash users' browsers. This tactic is employed to facilitate ClickFix attacks, delivering a new…