Wednesday, April 23, 2025
Homecyber securityHackers Advertising New Version Of WarZone RAT On Hacking Forums

Hackers Advertising New Version Of WarZone RAT On Hacking Forums

Published on

SIEM as a Service

Follow Us on Google News

Cybersecurity experts have raised alarms as a new version of the notorious WarZone Remote Access Trojan (RAT) has been spotted being advertised on various hacking forums.

The latest iteration, known as WarZone RAT v3, boasts enhanced features and capabilities, making it a more potent threat to individuals and organizations alike.

The WarZone RAT is an advanced type of Remote Administration Tool that allows cybercriminals to manage and monitor targeted devices remotely.

- Advertisement - Google News

This tool is particularly designed for Windows operating systems and is known for its speed and stealthiness.

The RAT enables attackers to gain unauthorized access to victims’ computers, allowing them to steal sensitive information, deploy additional malware, and maintain persistent access to compromised systems.

You can analyze a malware file, network, module, and registry activity with the ANY.RUN malware sandbox, and the Threat Intelligence Lookup that will let you interact with the OS directly from the browser.

The Federal Bureau of Investigation (FBI) recently seized several Internet domains that were being used to sell Warzone RAT malware.

The agency also arrested individuals who were involved in selling the malware. Warzone RAT is a Remote Access Trojan that allows attackers to gain unauthorized access to a victim’s computer and steal sensitive information.

WarZone RAT v3 On Hacking Forums

The advertisement for WarZone RAT v3, as seen by ThreatMon in a recently leaked screenshot, highlights several new features that enhance its effectiveness.

https://twitter.com/MonThreat/status/1762476715987624306

One such feature is the “Smart Updater,” which allows the RAT to update its tools file on all clients, including new ones, without detection. 

This feature can also be disabled at the user’s discretion, providing flexibility to the attacker.

Moreover, the advertisement mentions the ability to uninstall old files if the new file can be executed successfully, suggesting that the RAT can clean up its tracks to avoid detection.

It also claims that users can connect to their WarZone Server and even expose the HTTP server to the internet, potentially increasing the reach of their malicious activities.

The list of features includes client control, file manager, startup manager, remote system control, and more.

These tools give attackers a wide range of capabilities, from basic surveillance to full control over the infected device.

The RAT also includes a “WarZone rat poison” feature, which could refer to a mechanism for corrupting or disabling security software on the victim’s computer.

Security experts warn that the availability of such sophisticated tools on hacking forums increases the risk of cyber attacks, especially for those who lack robust cybersecurity measures.

The ease of access to these tools allows even low-skilled attackers to launch advanced attacks, making it crucial for individuals and organizations to stay vigilant and keep their security systems up to date.

The advertisement of WarZone RAT v3 also emphasizes its ability to make payloads harder to detect, which is a significant concern for cybersecurity professionals.

As the cyber threat landscape continues to evolve, staying informed and prepared is the best defense against these insidious attacks.

You can block malware, including Trojans, ransomware, spyware, rootkits, worms, and zero-day exploits, with Perimeter81 malware protection. All are extremely harmful, can wreak havoc, and damage your network.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

New Malware Hijacks Docker Images Using Unique Obfuscation Technique

A recently uncovered malware campaign targeting Docker, one of the most frequently attacked services...

Critical Browser Wallet Vulnerabilities Enable Unauthorized Fund Transfers

Researchers have disclosed a series of alarming vulnerabilities in popular browser-based cryptocurrency wallets that...

APT34 Hackers Use Port 8080 for Fake 404 Responses and Shared SSH Keys

Researchers have uncovered early indicators of malicious infrastructure linked to APT34, also known as...

Hackers Exploit Weaponized Word Docs to Steal Windows Login Credentials

A sophisticated phishing campaign has been uncovered by Fortinet’s FortiGuard Labs, targeting Windows users...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

New Malware Hijacks Docker Images Using Unique Obfuscation Technique

A recently uncovered malware campaign targeting Docker, one of the most frequently attacked services...

Critical Browser Wallet Vulnerabilities Enable Unauthorized Fund Transfers

Researchers have disclosed a series of alarming vulnerabilities in popular browser-based cryptocurrency wallets that...

APT34 Hackers Use Port 8080 for Fake 404 Responses and Shared SSH Keys

Researchers have uncovered early indicators of malicious infrastructure linked to APT34, also known as...