SecurityThe Hacker Newsabout 1 hour ago
Spark RAT Hits Cambodia via OPSWAT Driver
1 min read
Spark RAT targets Cambodia via phishing lures, using a vulnerable OPSWAT driver (ardrv.sys) to disable security tools. Acronis found artifacts from late June through early August 2026. The attack uses DLL side-loading via a signed Tencent executable and shows possible Silver Fox links.
Level
Hype check
Tap to vote and see what everyone thinks.
