Argamal RAT Distributed via Infected Hentai Games

Kaspersky GReAT researchers documented Argamal, a remote access trojan distributed via infected hentai game archives on file-sharing platforms. The RAT grants attackers full remote control of victim machines, including keylogging, screen capture, file exfiltration, and webcam access. Payload delivery relies on bundling the trojan inside otherwise functional game binaries, reducing suspicion at install time. The campaign appears financially motivated with a focus on capturing banking session credentials and stored passwords. Victims tend to avoid reporting due to the nature of the source material, which likely helps the campaign persist longer than typical piracy-based malware distributions.