New Krasue Linux RAT targets telecom companies in Thailand

A Linux RAT named Krasue is targeting telecom companies in Thailand, according to Group-IB researchers. Undetected since 2021, the RAT is speculated to be part of a botnet or sold by initial access brokers. The RAT features seven embedded rootkits and can hide its activity to avoid detection. There are apparent similarities between Krasue and Linux XorDdos malware, leading to speculation they were developed by the same author.