{ads}

›

Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

Written By Monday, 17 November 2025 Add Comment



November 17, 2025 at 04:50PM

The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT. The campaign, which is primarily aimed at Chinese-speaking users, employs trojanized NSIS installers masquerading as legitimate like Google Chrome and Microsoft Teams, according to Elastic Security Labs. "The

from The Hacker News https://ift.tt/pqj3xg5

0 Response to "Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads