etherrat

etherrat covers reporting on a Windows malware campaign that impersonates Microsoft Teams support to trick employees into installing a remote access trojan. Explore how phishing email, fake calls from an alleged system administrator, legitimate remote-access tools, and a malicious Windows Installer work together, along with the campaign’s blockchain-backed command-and-control infrastructure. This tag is useful for following the EtherRAT attack chain and the broader security risks created when workplace collaboration software, remote assistance, and employee trust become part of an intrusion. The available coverage focuses on the campaign’s reported July 2026 activity and its impact on Windows systems.