SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data

https://hackread.com/wp-content/uploads/2026/09/sectoprat-abuses-audio-software-steal-pc-data.jpg

Attackers concealed a SectopRAT variant inside tampered components belonging to legitimate digital audio software, creating a multi-stage infection chain that gave them remote control of a Windows system.

FortiGuard Incident Response found the files while investigating an intrusion and shared its findings with Hackread.com ahead of publication. Researchers did not name the software or its developer, stating only that it was a digital audio workstation made by an Italian company.

SectopRAT Returns

SectopRAT (ArechClient2) is not new to Windows malware campaigns. In April, the SANS Internet Storm Center documented an infection in which Lumma Stealer was followed by SectopRAT after a victim downloaded cracked software, showing another route through which the RAT has reached Windows systems.

FortiGuard’s investigation shows a different approach, with the RATconcealed inside modified components of legitimate audio software rather than delivered as a standalone download. The altered files were found under C:\ProgramData on...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE

Read more