Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America

Summary: Dark Caracal has been linked to a campaign deploying Poco RAT, a remote access trojan targeting Spanish-speaking sectors in Latin America, particularly in 2024. The malware possesses advanced espionage capabilities, facilitating extensive data collection and intrusion efforts across various industries. This campaign marks a continuation of Dark Caracal’s focus on cyber espionage in the region, utilizing sophisticated phishing techniques to deliver the trojan.

Affected: Spanish-speaking enterprises in Latin America (Venezuela, Chile, Dominican Republic, Colombia, Ecuador)

Keypoints :

• Dark Caracal is associated with Poco RAT, linked to phishing attacks targeting multiple industries.
• The malware boasts extensive espionage features, including file uploads, screenshot capture, and command execution.
• Phishing attacks leverage finance-themed lures, using .rev archives to conceal payloads while evading detection.