Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

New BotHelper RAT Lets Attackers Watch Windows Screens in Real Time

Cyber Press
Cyber Press
Published September 29, 2026Original Report

Excerpt

A newly analyzed Windows remote access trojan can stream a victim’s screen to an attacker while also running commands, downloading files and maintaining access after a restart. Point Wild Threat Intelligence calls the previously undocumented .NET malware BotHelper RAT, after a namespace found in its code. Its researchers observed the screen-streaming function during analysis; the other functions were identified in the malware’s command handler. The infection begins with a…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREeasyllms.xyzCAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(1)
Capability
Victim

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA2560d41ce75da4f3404734358411a72ffc4169376dcfebda52ac50eb66eac73d2f6MediumScore 53/100First seen
SHA2568f39fe882e45dfa8a7446d59dfef86b583a868ff846ade86124a57041f5c63fdMediumScore 53/100First seen
Domaineasyllms.xyzHighScore 58/100First seen

IOC Relationship Graph

Building graph…