Spark RAT Campaign Targets Cambodia, Abuses Vulnerable OPSWAT Driver

A campaign attributed by Acronis Threat Research is delivering the open-source Spark RAT against targets in Cambodia, using lures including fake government notices, public health materials, and real estate content, suggesting an effort to appeal to a broad range of victims.

The malware abuses a vulnerable OPSWAT driver to disable security tools on infected machines.