PureRAT Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
14
occurrences
First Seen
November 6, 2025
Last Seen
April 21, 2026

Related Threat Clusters

  • PureRAT Campaign Uses PNGs for Stealthy Fileless Attacks

    A new malware campaign utilizing the PureRAT remote access trojan (RAT) has been identified, targeting Windows systems. This sophisticated attack hides malicious portable executable (PE) payloads within PNG image files,…

    2 articles · Updated April 21, 2026
  • Phishing Campaign 'I Paid Twice' Targets Booking.com Hotels and Guests

    A phishing campaign named 'I Paid Twice' has been identified, targeting Booking.com hotel partners and their customers. Cybercriminals compromised hotel accounts to send phishing emails that tricked victims into…

    2 articles · Updated November 7, 2025
  • HP Reports Increase in Polished Fake Updates and Malware Attacks

    HP has identified a rise in cyber attacks that utilize polished fake update screens and staged password prompts to deceive users into installing malware. The Threat Insights Report from HP's Threat Research Team…

    1 article · Updated January 9, 2026
  • AI-Driven Phishing Campaign Distributing PureRAT Malware

    A Vietnamese threat actor is utilizing AI to create code for a phishing campaign that delivers PureRAT malware and other malicious payloads. The campaign targets individuals with job-themed emails, luring them to open…

    2 articles · Updated January 30, 2026
  • Black Friday 2025 Sees Surge in Online Shopping Scams

    During Black Friday 2025, shoppers in Europe and the US are facing a significant increase in online scams, with cybercriminals impersonating major brands to exploit consumers. Action Fraud reports that £11.8 million was…

    43 articles · Updated November 20, 2025
  • Animated Lures Used in Cyberattacks to Infect PCs

    Attackers are utilizing professional-looking animations to deceive users into downloading malware. The HP Threat Research report details how these campaigns leverage purchasable malware tools and techniques to evade…

    2 articles · Updated December 11, 2025
  • ClickFix Phishing Campaign Targets Booking.com and Hotels

    A phishing campaign named ClickFix has been targeting hotels and their customers, exploiting compromised accounts on Booking.com. Cybercriminals have used malware to steal customer data and launch phishing attacks,…

    8 articles · Updated November 28, 2025
  • Global Phishing Campaign Targets Booking.com and Hotels

    A phishing campaign named 'I Paid Twice' has been targeting Booking.com partner hotels and their customers since April 2025. Cybercriminals are using compromised hotel accounts to send phishing emails that trick…

    1 article · Updated November 17, 2025

Recent Intelligence Reports

  • New PureRAT Campaign Hides PE Payloads in PNG Files and Executes Them Filelessly — Cybersecuritynews · April 21, 2026
  • PureRAT Hides PE Payloads in PNGs for Fileless Execution — Gbhackers · April 21, 2026
  • AI used in PureRAT malware campaign — Scworld · January 30, 2026
  • PureRAT: Attacker Now Using AI to Build Toolset — Security · January 28, 2026
  • HP warns of surge in polished fake updates & malware — Securitybrief · January 9, 2026
  • Animations used to trick users into infecting their PCs — Betanews · December 11, 2025
  • Malware in Motion: Animated Lures Trick Users into Infecting Their PCs | HP® Official Site — Hp · December 11, 2025
  • Authorities warn of cyberattack targeting accommodation facilities — Vietnamnet.Vn · November 28, 2025

CVSS v3.1 Breakdown