UNMASKING EVLF DEV - THE CREATOR OF CYPHERRAT AND CRAXSRAT

Summary from the TLDR Cybersecurity newsletter

The CYFIRMA research team has discovered a new Malware-as-a-service (MaaS) operator that goes by the moniker EVLF DEV. This threat actor is responsible for the development of CypherRAT and CraxsRAT, which in the last 3 years was purchased by over 100 distinct threat actors on a lifetime license. In this research report, they discuss the MaaS operator and the malware being developed by them.