LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
LabubaRAT poses as NVIDIA software, profiles security tools, and uses HTTPS, WebView2, or DNS tunneling to maintain remote access on Windows hosts.
More info