Experts uncover bizarre new malware that spooks users with jump scares and screams

Security researchers at Group-IB have identified a new Remote Access Trojan (RAT) dubbed 'KGB RAT,' which is being sold as a Malware-as-a-Service (MaaS) platform. Active since at least 2022, the malware offers a range of malicious capabilities, including credential theft, keylogging, and cryptocurrency hijacking. Beyond standard data exfiltration, KGB RAT distinguishes itself with 'psychological harassment' features, such as fake Blue Screen of Death (BSOD) errors, jump scares, and loud audio screamers. The malware is marketed on underground forums with subscription tiers ranging from $150 to $800, often disguised as a legitimate IT tool complete with fake reviews. It employs advanced evasion techniques, including sandbox detection and obfuscation, to maintain persistence on infected systems. Researchers warn that the developers are actively weaponizing victim anxiety alongside traditional cybercriminal activities, highlighting a growing trend in the sophistication and psychological manipulation tactics used by modern threat actors.