XWorm RAT evolves into surveillance platform with new features

XWorm RAT: XWorm is a Windows-based Remote Access Trojan malware first observed in 2022 that provides attackers with remote control over infected systems through modular plugins and encrypted command-and-control channels. It has historically focused on information theft functions such as keylogging and credential harvesting. The malware has recently evolved with expanded plugin capabilities that add real-time surveillance features, including location tracking, live audio streaming, and interactive control over authenticated browser sessions. Threat Landscape: Public leaks of malware builders and source code have facilitated ongoing customization and deployment of RAT toolkits by various threat actors. Malware Evolution: Developers of remote access trojans continue to integrate advanced surveillance plugins that enable covert monitoring and session manipulation beyond traditional data theft. Security Implications: Browser session hijacking capabilities in malware allow attackers to operate within already authenticated user environments, reducing the effectiveness of standard authentication protections.