A Vietnamese threat actor's shift from PXA Stealer to PureRAT

T1Covered by 1 source · first reported by Huntress at 25 Sept 2025, 14:00 UTC

Trace a threat actor's journey from custom Python stealers to a sophisticated commodity RAT. Learn how their tactics evolved and why this shift to .NET matters.

devsecurity

Sources

• T1A Vietnamese threat actor's shift from PXA Stealer to PureRATHuntress25 Sept 2025, 14:00