Cybersecurity experts have warned about a new and highly sophisticated trojan, StilachiRAT, which poses a serious threat to Windows users—particularly those who rely on Google Chrome. This malware can steal sensitive information, access stored credentials, and even take full control of an infected system.
How does StilachiRAT work?
StilachiRAT is a remote access trojan (RAT) that infiltrates Windows systems through fake software updates and malicious programs. Once installed, it establishes a secret connection with external servers, allowing cybercriminals to execute commands, manipulate files, and extract data without the user’s knowledge.
Key threats posed by StilachiRAT
One of the most concerning aspects of this malware is its ability to collect extensive information about the infected system. This includes operating system details, active processes, and remote desktop sessions, making it easier for attackers to target their victims effectively.
Additionally, StilachiRAT can steal saved credentials from Google Chrome by decrypting the browser’s encrypted password storage. This means that any stored login details, including banking and cryptocurrency accounts, are at serious risk.
Another alarming feature of this malware is its capability to monitor clipboard activity, specifically searching for cryptocurrency wallet addresses. This allows attackers to replace copied wallet addresses with their own, leading to financial theft without the user realizing it.
How to protect your system
To minimize the risk of infection, Microsoft recommends avoiding downloads from unofficial sources, especially software updates and browser extensions. Additionally, activating reliable anti-malware software and keeping all security measures updated can help detect and block this type of threat before it can cause damage.