Remote access trojan deployment

Named by 3 kept items in this workspace.

Search every workspace for Remote access trojan deployment. It matches the name as written, so it can find other things that share it.

The items that name it 3

ChainVeil and ViteVenom are DPRK’s PolinRider Campaign
writeup2026-07-17
77KB RAT bundled within ChainVeil's malicious npm packages
npm now freezes high-impact accounts after risky account changes
article2026-06-26It is written here as Remote access trojan (RAT) deployment.
RAT installed via fake system-update prompt gave the attacker control of the victim's machine and access to a live npm session.
JFrog: The Governance Gap Between Your Policy and Your Pipeline
article2026-05-21
GlassWorm deployed a RAT across approximately 35,800 installs.

All techniques in this workspace.