The Purple Fox virus’s operators have retooled their malware arsenal with a new edition of a remote access trojan known as FatalRAT, while also updating its evasion tactics to defeat protection software.
Prior Minerva Labs research provided light on a similar mode of operation of exploiting fake Telegram apps to disseminate the backdoor.