From Phishing to Persistence: A CrySome RAT Infection Chain Analysis

Reported 07 Jul 2026 by otx · Severity: medium

A sophisticated multi-stage infection chain was analyzed following successful containment by MDR SOC operations. Initial access occurred through spear-phishing using a logistics rate confirmation lure, delivering CrySome remote access trojan via multiple stages. The attack chain