
Under the Pure Curtain: From RAT to Builder to Coder
Research by: Antonis Terefos (@Tera0017) Key Points Check Point Research conducted a forensic analysis of a ClickFix campaign that lured victims with fake job offers that resulted in an eight-day intrusion. The threat actor deployed multiple tools, including a Rust Loader, PureHVNC RAT, and the Sliver command-and-control framework. In this publication, we analyzed the associated files, providing one of the most comprehensive analyses of PureHVNC…