DarkWatchMan RAT Hides Data in Windows Registry to Evade Detection

Researchers have identified a fraudulent website designed to deceive users by posing as the popular Russian platform CryptoPro CSP. Attackers drop DarkWatchman RAT during the attack to steal data. This innovative tactic places it in the category of fileless malware and indicates that the operators are highly sophisticated.