Cybercriminals Deploying VCURMS and STRRAT Trojans via AWS and GitHub

The VCURMS RAT uses a Proton Mail email address for communicating with a command-and-control server and can extract and execute commands from specific subject lines in emails.