: At the time of its initial discovery, Moonrise was largely undetected by traditional Antivirus (AV) solutions on platforms like VirusTotal because it uses unencrypted WebSocket (ws://) channels for command-and-control (C2) and lacks heavy obfuscation that might trigger signature-based alerts.
: The malware enables attackers to execute remote commands, capture screens, monitor microphones/webcams, log keystrokes, and harvest credentials from browsers and clipboards. : At the time of its initial discovery,
Moonrise is a sophisticated, Go-based (Golang) malware designed for of infected Windows systems. It is frequently distributed via ZIP archives masquerading as legitimate software, cracks, or driver updates. Key Technical Findings or driver updates. Key Technical Findings