# Malware uses jump scares and screams to terrorize Windows users

> Security researchers uncover KGB RAT, a remote access trojan marketed as legitimate software that combines data theft with psychological harassment tactics.
- Title: Malware uses jump scares and screams to terrorize Windows…
- Summary: Security researchers uncover KGB RAT, a remote access trojan marketed as legitimate software that combines data theft with psychological harassment tactics…
- Keywords: kgb rat, malware, remote access trojan, group-ib, cybersecurity, malware-as-a-service, data theft, cryptocurrency theft, technology, uses, jump, scares
- Source: TechRadar — https://techradar.com/pro/security/experts-uncover-bizarre-new-malware-that-spooks-users-with-jump-scares-and-screams
- Published: 2026-10-15T19:05:00+00:00
- Read time: 2 min
- Topics: kgb rat, malware, remote access trojan, group-ib, cybersecurity, malware-as-a-service, data theft, cryptocurrency theft, technology
## New malware weaponizes Windows users' fears
Security researchers Group-IB discovered KGB RAT, a remote access trojan that combines traditional hacking with psychological harassment. The malware has been advertised for sale on underground forums since late twenty twenty-five.
## Subscriptions start at one hundred fifty dollars monthly
KGB RAT is offered as malware-as-a-service with subscriptions starting at one hundred fifty dollars per month and reaching eight hundred dollars annually. The annual subscription works out to roughly sixty-seven dollars per month.
## Even cheap plans include full hacking features
The one hundred fifty dollar monthly package includes remote desktop access, file management, webcam and microphone access, keylogging, password recovery, endpoint persistence, and anti-detection features. All major capabilities are included at the lowest tier.
## Malware hijacks cryptocurrency transactions
KGB RAT monitors the clipboard for copied wallet addresses and replaces them with addresses owned by attackers during pasting. This allows criminals to intercept cryptocurrency transfers without the victim's knowledge.
## Premium plans add network spreading capability
More expensive subscriptions include multi-client management, payload customization, additional evasion features, plugin support, and access to extensive server infrastructure. A separate five hundred dollar network spreading add-on allows automatic propagation throughout compromised networks.
## Jump scares and fake blue screens terrorize victims
KGB RAT includes screamer functions, jump scares, and forced blue screens of death. The developers call these psychological harassment features fun settings, signalling they are comfortable weaponizing victim anxiety alongside data theft.

> fun settings
## Malware disguises itself as legitimate software
KGB RAT's website includes fake customer reviews and claims of being used by more than ten thousand IT professionals.It features an education section with how-to videos and a legal section with disclaimers encouraging legitimate use.
## Multiple operators already using the malware
Researchers identified multiple operators using the same malware builder, including at least one focused on stealing cryptocurrency from victims. The malware uses a Telegram bot to notify attackers when new devices become infected.
## Key takeaway

Group-IB discovered KGB RAT, a malware-as-a-service platform sold since late twenty twenty-five that steals data and cryptocurrency while using jump scares and fake blue screens to harass victims.