KGB RAT Uses FUD Crypter to Evade Windows Defender and Spy on Victims

What happened

Researchers identified unobfuscated payloads, obfuscated variants, and encrypted loaders that reconstruct malware (software written to damage a system or steal from it) during execution. This distinction matters: the crypter conceals the underlying payload, while the deployed […] The post KGB RAT Uses FUD Crypter to Evade Windows Defender and Spy on Victims appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

This distinction matters: the crypter conceals the underlying payload, while the deployed RAT performs activities that behavioral monitoring can expose. Group-IB reported detecting analyzed samples despite their obfuscation or delivery through droppers.

Existing NjRAT signatures also matched the analyzed family. KGB RAT, a Windows remote access trojan marketed as legitimate administration software, combines surveillance, credential theft, and configurable malicious functions with a built-in crypter advertised to evade Windows Defender.

cyber security Cyber Security News Windows 2 min. Read KGB RAT Uses FUD Crypter to Evade Windows Defender and Spy on Victims By Mayura Kathir October 15, 2026 Share Facebook Twitter Pinterest WhatsApp KGB RAT, a Windows remote access trojan marketed as legitimate administration software, combines surveillance, credential theft, and configurable malicious functions with a built-in crypter advertised to evade Windows Defender.

Most examined samples were x86 .NET executables written primarily in VB.NET. Supported output formats reportedly include EXE, BAT, HTA, and REG.