Identification and Disruption of the Warzone Remote Access Trojan (RAT)

FBI FLASH alert warns of Warzone RAT threat, seeks victim reporting for global disruption efforts.

Identification and Disruption of the Warzone Remote Access Trojan (RAT)

TLP:CLEAR

Summary

The Federal Bureau of Investigation (FBI) is releasing this FLASH to disseminate indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with the Warzone Remote Access Trojan (RAT), also identified as "Ave Maria" through open-source reporting and FBI investigation. On 7 February 2024, the FBI and international partners executed a coordinated operation to disrupt Warzone RAT infrastructure worldwide. The FBI is releasing this product to maximize awareness on the service and to seek additional reporting from victims. 

Please click here to read more detail

TLP:CLEAR