“Borat,” an emerging remote access trojan (RAT), has been recently discovered by Cyble researchers and observed providing ransomware and distributed denial-of-service (DDoS) services alongside the typical RAT functionality. Borat’s author, who is currently undisclosed, revealed that the main capabilities of the RAT are as follows: keylogging, ransomware, DDoS, audio recording, webcam recording, remote desktop, reverse proxy, gaining device information, process hallowing, browser credential stealing, discord token stealing, and remote activities. Additional feature categories include remote hVNC, remote “harrassment”, remote system, stub features, password recovery, and RAT+HVNC. Further details of these capabilities can be viewed in Cyble’s report linked below. Researchers described this RAT as “a potent and unique combination of Remote Access Trojan, Spyware, and Ransomware, making it a triple threat to any machine compromised by it.” CTIX analysts will continue to monitor Borat as it evolves, and indicators of compromise (IOCs) can be reviewed in the Cyble report linked below.