• Latest
  • All
  • How To
Hospitals Targeted by Stealthy New Malware Called ResolverRAT

Hospitals Targeted by Stealthy New Malware Called ResolverRAT

April 15, 2025
Bitchat

Jack Dorsey Launches Bitchat, a Bluetooth-Only Messaging App

July 10, 2025
YouTube AI slop is getting demonetized

YouTube Declares War on Low-Effort AI Videos via Demonetization

July 10, 2025
Why Can'y You Register a Safaricom SIM Card After 7 PM

Why You Cannot Register a Safaricom SIM Card After 7 PM

July 10, 2025
Former Safaricom Chief Enterprise Business Officer, Cynthia Karuri-Kropac

Frankline Okata Takes Over as Cynthia Karuri-Kropac Exits Safaricom PLC

July 10, 2025
DHgate Tablet Cases deals
AI

OpenAI and Perplexity Launch Browsers to Rival Google Chrome

July 10, 2025
Vivo-Y29-4G

Vivo Y29 Launches in Kenya at KES 23,999

July 10, 2025
galaxy z fold7-galaxy z flip7-samsung

Samsung Unveils Galaxy Z Fold7 and Z Flip7 with Bigger Screens

July 10, 2025
GTA VI

Rockstar May Be Testing 96-Player Servers for GTA 6

July 10, 2025
Former X CEO, Linda Yaccarino

Linda Yaccarino Steps Down as CEO of X After Two Years

July 9, 2025
Apple-WWDC25-iOS-26

iPhone Users Are Not Too Happy With the iOS 26 Liquid Glass Design

July 9, 2025
Official document handover by Bernard Mwonyonyo and Habib Lukaya from Roam.

E-Mobility in Kenya Gets a Lift with New Bike Financing Program

July 9, 2025
Samsung

This Samsung Security Update Could Change How You Use Your Phone

July 9, 2025
Techweez | Tech News, Reviews, Deals, Tips and How To
  • News
  • Entertainment
  • Reviews
  • Features
  • Editorial
No Result
View All Result
Techweez | Tech News, Reviews, Deals, Tips and How To
  • News
  • Entertainment
  • Reviews
  • Features
  • Editorial
No Result
View All Result
Techweez | Tech News, Reviews, Deals, Tips and How To
No Result
View All Result

Hospitals Targeted by Stealthy New Malware Called ResolverRAT

Naftary Thitu by Naftary Thitu
April 15, 2025
in News
Reading Time: 3 mins read
290
0

A newly discovered malware strain, ResolverRAT, is turning heads in the cybersecurity world, and not for good reasons. Designed to sneak into healthcare and pharmaceutical systems, it’s clever, quiet, and dangerous.

How Does ResolverRAT Spread?

ResolverRAT starts off with phishing emails, and not your typical generic spam. These emails are written in local languages and themed around local issues like copyright violations and lawsuits. They’re designed to look serious, making victims more likely to click malicious attachments.

Morphisec, the cybersecurity company that uncovered the threat, says this strategy shows a global, coordinated attack aimed at increasing success by speaking the user’s language, literally.

What Makes ResolverRAT So Dangerous?

  • Uses trusted apps against you: It hides inside legitimate software like hpreader.exe, sneaking into systems using a method called DLL side-loading.
  • Stays in memory only: ResolverRAT avoids writing files to your disk. Instead, it runs entirely in memory, making it harder for antivirus programs to catch.
  • Encrypts and hides everything: The code is heavily encrypted using AES-256 and scrambled to confuse malware analysts.
  • Bypasses traditional security: It uses a rarely seen .NET feature called ResourceResolver hijacking to operate invisibly, dodging systems that watch for more common threats.

Once it infiltrates a system, ResolverRAT embeds itself deeply to maintain long-term control. It modifies system registries and discreetly places files across multiple directories to ensure it survives reboots.

Its command-and-control (C2) infrastructure is designed for stealth, using IP rotation, standard network ports, and bypassing conventional certificate validation to avoid detection.

When exfiltrating data, it transmits information in small, fragmented chunks, allowing the traffic to blend seamlessly with normal internet activity.

Why Healthcare and Pharmaceutical Organizations?

Healthcare and pharmaceutical organizations have become prime targets for cyberattacks due to the sensitive nature of the data they handle, including personal and medical information.

Many of these institutions still depend on outdated systems, which are often more vulnerable to exploitation. Additionally, the critical nature of their services means that any downtime can have severe consequences, making them more likely to pay ransoms to restore operations quickly.

As a result, the healthcare industry consistently suffers the highest average costs from data breaches, amounting to an estimated $6.2 billion annually.

How Can Organizations Stay Safe?

  1. Train your teams, especially around phishing awareness.
  2. Deploy behavior-based security tools, not just antivirus software.
  3. Regularly audit your systems: Check for weird memory behavior or unauthorized changes.
  4. Monitor DLL behavior: Keep an eye on legitimate apps loading suspicious code.
  5. Use strong segmentation: Isolate networks so threats can’t move freely.

Given the malware’s advanced capabilities and targeted approach, it’s crucial for organizations, especially in the healthcare and pharmaceutical sectors, to remain vigilant and strengthen their cybersecurity measures.

Tags: CybersecurityMalwarePhishing
SendShare160Tweet100
Naftary Thitu

Naftary Thitu

Tech enthusiast and ICT guru by trade, I've swapped debugging code for decoding tech trends. When I’m not wrangling with cybersecurity conundrums or geeking out over the latest gadgets, I’m busy turning techie mumbo jumbo into engaging, often hilarious, articles.

Related Posts

DeepSeek_vs_ChatGPT

Hackers Build Malware That Tries to Reprogram AI Security Tools

July 1, 2025
tackling Bank Fraud, Sextortion, and Ransomware in Kenya

Kenya Facing Rise in Cyberthreats from Bank Fraud, Sextortion, and Ransomware

July 1, 2025
Kenya cyber threats 2025

Kenya Detects Over 2.5 Billion Cyber Threats in Three Months

June 30, 2025
Iran cyberattacks

Cyber Attacks Soar After US Airstrikes on Iran Sites

June 27, 2025
How to Secure Your Phone and Yourself During Protests

How to Secure Your Phone (and Yourself) During Protests

June 25, 2025
google-chrome

Three Billion Chrome Browser Users at Risk from Zero Day Hack

June 3, 2025

Latest

Bitchat

Jack Dorsey Launches Bitchat, a Bluetooth-Only Messaging App

July 10, 2025
YouTube AI slop is getting demonetized

YouTube Declares War on Low-Effort AI Videos via Demonetization

July 10, 2025
Why Can'y You Register a Safaricom SIM Card After 7 PM

Why You Cannot Register a Safaricom SIM Card After 7 PM

July 10, 2025
Former Safaricom Chief Enterprise Business Officer, Cynthia Karuri-Kropac

Frankline Okata Takes Over as Cynthia Karuri-Kropac Exits Safaricom PLC

July 10, 2025
AI

OpenAI and Perplexity Launch Browsers to Rival Google Chrome

July 10, 2025
Vivo-Y29-4G

Vivo Y29 Launches in Kenya at KES 23,999

July 10, 2025

Best devices

budget smartwatches 2025

Best Budget Smartwatches To Buy in Kenya 2025

February 13, 2025

Best Infinix Smartphones To Buy in Kenya 2024

February 13, 2025

Best Laptops for Battery Life in 2024

August 21, 2024

Best “Battery Warrior” Smartphones To Buy in 2024

August 22, 2024

Jack Dorsey Launches Bitchat, a Bluetooth-Only Messaging App

July 10, 2025

YouTube Declares War on Low-Effort AI Videos via Demonetization

July 10, 2025

Techweez is a fast growing influential source of technology news, reviews and analysis by leading tech geeks in the industry.

Follow Us

Editorials

Abductions and Arrests! Kenyan Government’s Fear and Hate of X Users Makes No Sense

Actors and Film Crews Are Worried About Veo 3 Taking Their Jobs

Samsung QLED TVs Now Officially Certified for Real Quantum Dot Technology

Trump’s Tariffs Will Be the End of Affordable Tech

5 Ways to Prep Your Tech for Resale

The Weaponization of PDFs: How Cybercriminals Are Exploiting a Trusted Format

More News

Samsung Unveils Galaxy Z Fold7 and Z Flip7 with Bigger Screens

Rockstar May Be Testing 96-Player Servers for GTA 6

Linda Yaccarino Steps Down as CEO of X After Two Years

iPhone Users Are Not Too Happy With the iOS 26 Liquid Glass Design

E-Mobility in Kenya Gets a Lift with New Bike Financing Program

This Samsung Security Update Could Change How You Use Your Phone

  • Terms Of Use
  • Techweez Brand
  • Privacy & Policy
  • Contact Us

© 2024 Techweez - Palahala Media Group may earn a commission when you buy through links on our sites.
A Palahala Media Group Brand. All rights reserved.
.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

Techweez | Tech News, Reviews, Deals, Tips and How To
Crunchy Cookies 🍪 Ahead!

Hey there! Just a heads-up: we're big fans of cookies - both the digital and edible kind! 🍪 We use our cookies and some from third parties to ensure your browsing experience on our site is smooth sailing and secure.

 

But wait, there's more! We also use cookies to gather stats and insights on how you navigate our site. It's like getting a behind-the-scenes peek at your digital adventures!

 

Don't worry, you're in control. You can adjust your cookie settings anytime to suit your preferences. Feeling curious? Dive into our Privacy Policy for all the juicy details. Happy browsing! 🚀

Functional Always active
Listen, this legal stuff is about as exciting as watching paint dry. But it basically says we only use your stuff for what you asked us to do, and nobody else gets to peek!
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
It's those sneaky cookie crumbs websites leave behind to count visitors, like counting ants at a picnic! Totally harmless, just for fun facts. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
Hey there! Just letting you know we use some fancy gizmos to remember your preferences. This way, we can show you ads that are, well, not completely bananas.
Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
Make cookies
{title} {title} {title}
Techweez | Tech News, Reviews, Deals, Tips and How To
Crunchy Cookies 🍪 Ahead!
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
Listen, this legal stuff is about as exciting as watching paint dry. But it basically says we only use your stuff for what you asked us to do, and nobody else gets to peek!
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
It's those sneaky cookie crumbs websites leave behind to count visitors, like counting ants at a picnic! Totally harmless, just for fun facts. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
Hey there! Just letting you know we use some fancy gizmos to remember your preferences. This way, we can show you ads that are, well, not completely bananas.
Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
Make cookies
{title} {title} {title}
No Result
View All Result
  • News
  • Reviews
  • Features
  • Editorial
  • Automotive
  • Entertainment

© 2024 Techweez - Palahala Media Group may earn a commission when you buy through links on our sites.
A Palahala Media Group Brand. All rights reserved.
.