DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer

Imported from official source

DarkMe, an APT-linked VB6 RAT known for using zero day exploits, turned up in two Huntress incidents stripped down to a plain .pif infostealer malware.

Read the original at the source: https://www.huntress.com/blog/darkme-rat-abandons-exploits

Officially imported this from Huntress’s own source. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

This publication has changed since it was first published

2 versions recorded. The original is kept in full — nothing is overwritten.

  1. v2 imported change on current
  2. v1 as first published on Titled: “[object Object]”

Provenance

Organization
Huntress — imported from official source
Official source
https://www.huntress.com/blog/rss.xml RSS
Imported
September 23, 2026 08:00
Versions
2 recorded
Identity
https://www.huntress.com/blog/darkme-rat-abandons-exploits

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.