# LabubaRAT: A New Malware Disguised as NVIDIA Software This Rust-based remote access trojan is infiltrating systems. - **Source:** [The Hacker News](https://brifing.si/source/f944ec2b-8180-47bc-94de-57085b5a6563) - **Published:** 2026-07-14 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/a0a6f183-c344-44d9-be23-254a14d1812b ## What is LabubaRAT? LabubaRAT is a Rust-based remote access trojan that masquerades as NVIDIA software. This malware creates a persistent foothold in target systems to carry out various malicious activities. ## How Does It Work? LabubaRAT uses a configuration executed via command-line arguments. This allows attackers to reuse the same binary across different infrastructures. The configuration is stored in a local SQLite database. ## Scans Target Systems The malware detects installed web browsers and security products. It checks for popular software like Google Chrome, Mozilla Firefox, and Microsoft Defender, and gathers system information. ## Wide Range of Functions LabubaRAT has various functions including command execution, file upload/download, screenshot capture, and SOCKS5 proxy support. These capabilities provide attackers with extensive control. ## Traces of MaaS Model There are indications that LabubaRAT is offered under a Malware-as-a-Service (MaaS) model. This suggests that the malware can be used by different attackers. ## Security Alert LabubaRAT stands out with its Rust-based structure and flexible configuration. Security experts emphasize the need for vigilance and continuous system updates against such malware. ## Sources covering this story - https://thehackernews.com/2026/07/labubarat-masquerades-as-nvidia.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._