Microsoft Word - GlassRAT final layout pmb-2015-11-22.docx

RSA Research describes GlassRAT, a stealthy Remote Administration Trojan (RAT) that evades many antivirus products, is delivered via signed droppers (abusing a compromised code‑signing certificate), and provides reverse‑shell, file transfer and command execution capabilities; the report details installation/persistence, C2 protocol and hosts, YARA signature/IOCs, and highlights C2 infrastructure overlap with other Asia‑focused espionage campaigns, suggesting targeted activity against Chinese nationals and organizations.