LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

LabubaRAT poses as NVIDIA software, profiles security tools, and uses HTTPS, WebView2, or DNS tunneling to maintain remote access on Windows hosts.

Raccontata dathehackernews.com