A Couple of Rats Pick Up New Tricks, Un Proposes Cybercrime Treaty

In this episode of the Microsoft Threat Intelligence Podcast host Sherrod DeGrippo is joined by Microsoft’s Dinesh Natarajan (linkedin.com/in/dinesh-natarajan-638a3b40/?ori…), Senior Threat Hunter, and Thomas Ball (linkedin.com/in/thomasfball), Senior Security Researcher. They unpack recent findings around AsyncRAT, a remote access Trojan (RAT) used for keylogging, data exfiltration, and deploying further malware.

Dinesh explains how attackers are now using screen-sharing tools, like Screen Connect, as part of a new infection chain that makes the malware delivery process more deceptive. Thomas then shares insights on SectopRAT, another threat targeting browser data and crypto wallets. Uniquely, this RAT creates a second desktop, allowing attackers to operate undetected.

Next, Sherrod talks with Microsoft’s Senior Director of Diplomacy, Kaja Ciglic (linkedin.com/in/kaja-ciglic-29333b7/?originalS…), about the UN’s proposed cybercrime treaty. Originally spearheaded by Russia, the treaty aims to create a global framework for prosecuting cybercrime, but critics worry about its potential impact on freedom of expression and human rights.

In this episode you’ll learn:

• How tech support scam emails lead to AsyncRAT installations on different devices

• The importance of leveraging tools like Microsoft Defender's SmartScreen for protection

• The treaty encourages cooperation but may let governments exploit unclear cybercrime definitions

Some questions we ask:

• How does social engineering through email play a role in these attacks?

• What capabilities does AsyncRat have, and why is it so concerning?

• How do we ensure the treaty doesn't impact freedom of expression or human rights?

Resources:
View Dinesh Natarajan on LinkedIn (linkedin.com/in/dinesh-natarajan-638a3b40/?ori…)
View Thomas Ball on LinkedIn (linkedin.com/in/tball)
View Kaja Ciglic on LinkedIn (linkedin.com/in/kaja-ciglic-29333b7/?originalS…)
View Sherrod DeGrippo on LinkedIn (linkedin.com/in/sherroddegrippo)

Related Microsoft Podcasts:

•
Afternoon Cyber Tea with Ann Johnson (afternooncybertea.com)

•
The BlueHat Podcast (bluehatpodcast.com)

•
Uncovering Hidden Risks (uncoveringhiddenrisks.com)

Discover and follow other Microsoft podcasts atnews.microsoft.com/podcasts

Get the latest threat intelligence insights and guidance at Microsoft Security Insider (nam06.safelinks.protection.outlook.com/?url=ht…)

The Microsoft Threat Intelligence Podcast is produced by Microsoft and distributed as part of N2K media network.