NJRAT launched by GTA-branded launchers from TEMP with firewall rule creation

Adarsh Pandey@Pandeyadarsh

•updated today•0•0•0

Detects the execution of NJRAT or related payloads launched via fake GTA, Rockstar, or Steam game launchers residing in temporary directories, accompanied by firewall rule modifications via netsh and outbound connections to known C2 infrastructure or Ngrok tunnels.