New AsyncRAT Forks Discovered Featuring Screamer Tool and USB Malware Spreader

Cybersecurity researchers have identified two sophisticated AsyncRAT variants that expand the remote access trojan’s capabilities with a psychological warfare component and enhanced propagation mechanisms.

The newly discovered forks introduce a “Screamer” plugin designed to terrorize victims through audio manipulation and a USB malware spreader that revives autorun-based infection techniques.

Enhanced Plugin Architecture Enables Novel Attacks

The latest AsyncRAT derivatives leverage the malware’s modular plugin architecture to implement features absent from established variants like DcRat and VenomRAT.

Written in C#, these forks maintain the characteristic Client.Algorithm namespace containing Aes256 and Sha256 cryptographic classes originally derived from Quasar RAT’s codebase.

However, the new variants incorporate MessagePack serialization and upgraded .NET Framework implementations that enhance data transmission efficiency.

Analysis of the InitializeSettings function reveals modified configuration schemas where the Version field contains identifiers linking to specialized ...