Dark Caracal Strikes Again: Poco RAT Hits Spanish-Speaking Latin America with Espionage Campaign!
Dark Caracal strikes again! This time, they’re targeting Spanish-speaking Latin Americans with their new Poco RAT malware, which spies with style, capturing screenshots and uploading files faster than you can say, “¡Ay caramba!” It’s like a telenovela, but with more phishing emails and fewer dramatic love triangles.

Hot Take:
Dark Caracal is back in the game, and they’ve brought their A-game with Poco RAT – the malware equivalent of a Swiss Army knife. With the espionage features loaded, they’re targeting Spanish-speaking enterprises like a cyber James Bond on a caffeine high. Watch out, Latin America, because this villain doesn’t need a license to phish!
Key Points:
- Dark Caracal is targeting Spanish-speaking victims in Latin America with the Poco RAT malware.
- Poco RAT is equipped with extensive espionage capabilities, including file uploads, command execution, and screenshot capture.
- The infection process uses finance-themed phishing emails with malicious attachments written in Spanish.
- Malware distribution leverages legitimate file-sharing platforms like Google Drive and Dropbox.
- Poco RAT uses POCO libraries in its C++ codebase, but lacks a built-in persistence mechanism.
Already a member? Log in here