SecurityWeek reports that a remote access trojan called CikaBika is being distributed through phishing emails. Once installed, the malware establishes command-and-control (C&C) communications using Discord, a legitimate messaging platform, which can help the malicious traffic blend in with normal network activity.
The RAT gives attackers a range of capabilities, including system reconnaissance, remote command execution, and data exfiltration. By relying on Discord's infrastructure rather than a dedicated server, the malware operators can reduce the cost and complexity of maintaining their own C&C channels.
Because the report is based on a single source, details about the campaign's scale, targeting, and specific phishing lures are not yet available. Organizations should treat unsolicited email attachments and links as potential entry points for this and similar threats.