Tele-Rat infiltrates Linux servers with Telegram command control, stealing data

TLDR:

• The Telegram-controlled TgRat trojan is targeting Linux servers to steal data.
• The trojan uses the messaging app Telegram to communicate with attackers and exfiltrate data.

TgRat, a Telegram-controlled trojan, has been discovered attacking Linux servers in an attempt to steal data. The trojan uses the popular messaging app Telegram as a vector to target Linux servers. Attackers can issue commands to the trojan through a private Telegram group, allowing them to download files, take screenshots, run commands, and upload data as attachments from compromised systems. The trojan uses a unique method to communicate with its control server, a Telegram bot, making it difficult for victims to detect the infection. Researchers recommend installing antivirus software on local network nodes to prevent infection from TgRat.