Nerbian RAT uses COVID-19 info as lure

A recent malicious email campaign has been spreading a new feature-rich remote access trojan, known as Nerbian RAT.

This malware campaign sends messages impersonating the World Health Organization (WHO). Victims are encouraged to download and open a Microsoft Word document that claims to contain important COVID-19 information, but actually uses malicious macros to install and run the trojan.

Nerbian RAT is written in Go, making it cross-platform, and includes features like the ability to track your keystrokes and capture screenshots. It also encrypts its communications with the command-and-control server. 

Acronis Cyber Protect Cloud includes advanced behavioral detection engines, powered my machine intelligence, enabling it to identify and block both known malware threats and brand-new ones like Nerbian RAT. With the Advanced Email Security pack, you can even prevents malicious emails like those used in this campaign from reaching users' inboxes in the first place.