Security researchers uncover KGB RAT malware offering jump scares and remote access
Group-IB researchers analyzed a new Remote Access Trojan called KGB RAT that was advertised on underground forums since late 2025.
Malware offers psychological tactics
The tool includes features designed to frighten Windows users with fake Blue Screen of Death errors and loud screams. Security experts note that these jump scares serve as unusual psychological tactics within the software package. Criminal operators market this malware-as-a-service platform alongside standard capabilities like credential theft and crypto hijacking.
Pricing and subscription details
Subscriptions for the KGB RAT service start at $150 per month for a single month of access. Annual plans cost $800, which works out to roughly $67 per month for the entire year. Researchers found evidence of the infrastructure dating back to January 2022 before it was publicly shared.
Multiple operators use the tool
Analysts discovered multiple distinct operators utilizing this specific malware strain in their campaigns. The software is currently available for purchase on various underground forums despite its criminal nature. Group-IB published an in-depth report detailing how these tools function and who uses them.
Reported by one outlet
Only one outlet has published this. Nothing here has been checked against a second report, so read it as that outlet's account and follow the link below for the original.
Reported by
1 independent outlet. Headline as published. Links open the original report.