PyStoreRAT Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
December 12, 2025
Last Seen
December 18, 2025

Related Threat Clusters

  • PyStoreRAT Malware Targets Developers via GitHub Accounts

    A new supply chain attack has emerged, utilizing dormant GitHub accounts to spread PyStoreRAT, a previously undocumented malware. This sophisticated attack primarily targets developers by distributing counterfeit…

    2 articles · Updated December 18, 2025
  • Malicious GitHub Scanner for React2Shell CVE-2025-55182 Discovered

    A GitHub repository masquerading as a vulnerability scanner for CVE-2025-55182, known as 'React2Shell', has been identified as a source of malware. The fake tool executes mshta.exe to deliver a malicious payload,…

    3 articles · Updated December 16, 2025

Recent Intelligence Reports

  • PyStoreRAT malware — Broadcom · December 18, 2025
  • Malicious 'React2shell-scanner' on GitHub targets researchers with malware — Scworld · December 16, 2025
  • PyStoreRAT malware spread via counterfeit developer tools — Scworld · December 12, 2025

CVSS v3.1 Breakdown