Syria-based developer and malware-as-a-service operator “EVLF DEV” has been identified to be behind the CraxsRAT and CypherRAT remote access trojans, according to SecurityWeek.

Read more here.