Security researchers have uncovered a new remote access trojan called QuimaRAT that criminals are selling online as a subscription service. Unlike most malware that targets only Windows, QuimaRAT is built in Java — meaning it runs equally well on Windows, macOS, and Linux computers. Subscriptions start at $150 for one month and go up to $1,200 for lifetime access.
A remote access trojan gives an attacker full control of your computer: they can browse your files, capture keystrokes, take screenshots, and listen through your microphone or webcam. QuimaRAT is typically delivered through phishing emails or disguised as legitimate software downloads. Because it targets all desktop platforms, Mac and Linux users — who sometimes assume they are immune to malware — should be just as cautious as Windows users.
How to check if you’re affected
Affected products include Windows PCs, Mac computers, and Linux systems that downloaded unfamiliar software or opened unexpected email attachments recently. If you notice your computer running slowly, apps you don’t recognise appearing in your task list, or your webcam light turning on by itself, run a full scan with your antivirus or security software. If you don’t have antivirus installed, Windows Defender (built into Windows) and Malwarebytes (free edition) are good starting points.