{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"RTM Group Banking Trojan Infection: Forensic Findings and Defender Actions","description":"A forensic investigation of a workstation infected with a banking trojan distributed by the RTM group revealed credential theft, persistence, and lateral movement. Defenders should isolate affected hosts, review authentication logs, and deploy EDR signatures to mitigate future attacks.","url":"https://rootpwn.me/news/rtm-group-banking-trojan-infection-forensic-findings-and-defender-actions","thumbnail_url":"https://rootpwn.me/images/d706dd4ec3694b60ab7a55492047eddc.jpg","thumbnail_width":1600,"thumbnail_height":900}