The Uroburos case: Agent.BTZ’s successor, ComRAT

The report traces the evolution of the ComRAT/Agent.BTZ/Uroburos malware family, describing a dropper that installs payloads, persistence via registry keys and COM hijacking, log file artifacts, and multiple C2 domains; it asserts ongoing activity by the related threat group and notes changes to keys and artifacts to conceal connections.