Darktrace Uncovers CikaBika Bot RAT

Darktrace uncovered a new Rust-based malware campaign named CikaBika Bot that uses Discord for command-and-control. Victims receive a PDF lure containing a Windows shortcut that launches a hidden PowerShell process to run the payload. The attackers harvest system information, processes, and network configuration while taking screenshots. Commands are transmitted via Discord, and data exfiltration occurs through Ngrok.