


Perceptive Security
SOC/SIEM Consultancy

Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT
Published:
6 maart 2026 om 14:33:00
Alert date:
6 maart 2026 om 16:02:35
Source:
thehackernews.com
Ransomware & Malware
Cybersecurity researchers have disclosed a multi-stage malware campaign codenamed VOID#GEIST by Securonix Threat Research. The campaign uses obfuscated batch scripts as an initial attack vector to deliver encrypted remote access trojan (RAT) payloads. The malware distributes multiple RAT variants including XWorm, AsyncRAT, and Xeno RAT through a stealthy attack chain. The campaign employs sophisticated obfuscation techniques and multi-stage deployment to evade detection. The attack represents an active threat delivering multiple powerful remote access tools to compromised systems.
Technical details
Mitigation steps:
Affected products:
Related links:
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
