E4del and PINHOLE RATs Exploit FTP Banners as Dead Drops for Malware Delivery

Threat actors are leveraging FTP banners as dead drop resolvers to deliver two new RATs, E4del and PINHOLE, which use advanced evasion techniques and multi-stage delivery mechanisms. The malware employs dynamic beaconing, APC injection, and compromised platforms for C2 communication to avoid detection and execute malicious payloads.

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote access trojans (RATs) tracked as E4del and PINHOLE.

While threat actors are known to abuse legitimate services to point to additional command-and-control (C2) infrastructure and blend in with regular network traffic, the development

Read original article