DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer

Reported 23 Sep 2026 by otx · Severity: medium

DarkMe, a Visual Basic 6 spy-RAT previously linked to financially-motivated APT group Water Hydra, was observed in two separate incidents affecting organizations in August 2026. Previously notable for weaponizing zero-day exploits including CVE-2023-38831 and CVE-2024-21412, this