Researchers say that JhoneRAT has various anti-detection techniques including making use of Google Drive, Google Forms and Twitter. Once downloaded, the RAT gathers information on the victims computers and is also able to download additional payloads. The attackers have also made use of various cloud services, such as Google Drive and Google Forms, as part of the infection s infection process. Researchers: The attackers put great effort to carefully select the targets located in specific countries based on the victim’s keyboard layout.
Source: https://threatpost.com/new-jhonerat-malware-targets-middle-east/152002/