Ekipa RAT Sold on Dark Web

Ekipa RAT is the name of a remote-access Trojan malicious tool. The malware was spotted when it was put up for sale on hacker forums.

According to researchers, Ekipa has a scary range of possibilities, likely to match its surprisingly high price. The malicious tool is sold for a whopping $4,500 as a one-time purchase.

The RAT has a wide range of capabilities that include more pedestrian functions such as data collection and exfiltration from the target system, including scraping system and hardware data and a list of installed anti-malware software and apps.

What makes Ekipa particularly scary is its ability to perform all normal tasks a regular user can on the infected system. This includes file manipulation, including uploading and downloading files to and from the infected system, as well as deleting, moving, renaming and executing files.

The ability to download and then execute arbitrary code on the victim system makes Ekipa a particularly formidable threat that can act as a gateway for hundreds of other potential malicious payloads.

The expensive malware comes with a custom control panel for budding hackers to use and control the software through it.

January 3, 2023
Loading...

Cyclonis Backup Details & Terms

The Free Basic Cyclonis Backup plan gives you 2 GB of cloud storage space with full functionality! No credit card required. Need more storage space? Purchase a larger Cyclonis Backup plan today! To learn more about our policies and pricing, see Terms of Service, Privacy Policy, Discount Terms and Purchase Page. If you wish to uninstall the app, please visit the Uninstallation Instructions page.

Cyclonis Password Manager Details & Terms

FREE Trial: 30-Day One-Time Offer! No credit card required for Free Trial. Full functionality for the length of the Free Trial. (Full functionality after Free Trial requires subscription purchase.) To learn more about our policies and pricing, see EULA, Privacy Policy, Discount Terms and Purchase Page. If you wish to uninstall the app, please visit the Uninstallation Instructions page.