Borat RAT emerges as triple threat to cyber organizations

Researchers late last week found a new remote access trojan (RAT) called Borat that unlike most other RATs, can execute ransomware and DDoS attacks.

Named after the popular movies starring Sacha Baron Cohen, Cyble researchers said in a blog post that the Borat RAT has an option to deliver a ransomware payload to the victim’s machine to encrypt users’ files as well as to demand a ransom.

The researchers said like other ransomware, Borat also can create a ransom note on the victim’s machine. Borat can also disrupt the normal traffic of a targeted server by performing a DDoS attack. The Borat RAT presents itself as a new distinctive triple threat combining ransomware, spyware and DDoS attacks, said Chuck Everette, director of cybersecurity advocacy at Deep Instinct.