{"id":77155,"date":"2025-05-27T12:35:35","date_gmt":"2025-05-27T09:35:35","guid":{"rendered":"https:\/\/gulftech-news.com\/en\/?p=77155"},"modified":"2025-05-27T12:47:07","modified_gmt":"2025-05-27T09:47:07","slug":"kaspersky-uncovers-griffithrat-a-sophisticated-malware-targeting-fintech-platforms-such-as-online-trading-platforms","status":"publish","type":"post","link":"https:\/\/gulftech-news.com\/en\/2025\/05\/27\/kaspersky-uncovers-griffithrat-a-sophisticated-malware-targeting-fintech-platforms-such-as-online-trading-platforms\/","title":{"rendered":"Kaspersky Uncovers GriffithRAT: a Sophisticated Malware Targeting Fintech Platforms such as Online Trading Platforms"},"content":{"rendered":"\n

Kaspersky revealed the discovery of GriffithRAT – a new and highly sophisticated malware used in campaigns targeting fintech companies, online trading platforms, and Forex exchange services worldwide, with victims in the UAE, Egypt, Turkiye, and South Africa.<\/strong><\/p>\n\n\n\n

Distributed via Skype and Telegram channels, GriffithRAT is typically disguised as files containing financial trend analysis or investment advice. These deceptive tactics target both organizations and individual traders who unknowingly download the malware. <\/p>\n\n\n\n

Once downloaded, it enables attackers to steal login credentials, capture screenshots\/webcam stream, log keystrokes, and monitor user activity. The stolen data can be exploited in a variety of ways, ranging from gathering competitive business intelligence to tracking individuals or valuable assets \u2013 highlighting the broad potential for misuse.<\/p>\n\n\n\n

Kaspersky researchers have been monitoring GriffithRAT for over a year and link it to cyber mercenary operations, where threat actors are contracted by third parties to conduct targeted attacks – often driven by motives such as corporate espionage.<\/p>\n\n\n\n

This connection is reinforced by technical analysis, which shows strong similarities between GriffithRAT and DarkMe intrusions, a known remote access Trojan (RAT) commonly used in mercenary-led cyber campaigns.<\/p>\n\n\n\n

\u201cThis discovery highlights the growing sophistication and commercialization of cyberthreats,\u201d said Maher Yamout, Lead Security Researcher at Kaspersky<\/strong>. \u201cGriffithRAT is not the work of random hackers, it is a maintained piece of malware and part of a broader trend where cyber mercenaries are hired to collect sensitive information, often for financial or strategic advantage. <\/p>\n\n\n\n

The data harvested could offer visibility into the inner workings of major organizations, provide unethical competitive advantage, and may also be sold on the dark web. It is a reminder that in today\u2019s threat landscape, cybercrime is increasingly professional, targeted, and persistent.\u201d<\/p>\n\n\n\n

To stay protected, Kaspersky advises individuals to:<\/p>\n\n\n\n