DesckVB RAT uses obfuscated JavaScript and a fileless .NET loader to evade detection

DesckVB RAT is a remote access trojan that uses layered scripting, fileless loading, and process injection to avoid many traditional defenses. Point Wild’s LAT61 team says the malware starts with an obfuscated JavaScript file, drops a PowerShell stage, and then loads .NET components directly into memory instead of relying on obvious files on disk. The […] The post DesckVB RAT uses obfuscated JavaScript and a fileless .NET loader to evade detection appeared first on VPN Central.