Sent as an "invoice" or "urgent document" attached to an email.
It features keylogging (recording every keystroke), screen capturing, and the ability to turn on the victim's webcam and microphone. BitRat.rar
Attackers typically disguise BitRAT as legitimate software to trick users into downloading and opening the .rar archive. Common delivery methods include: Sent as an "invoice" or "urgent document" attached
It can extract login credentials, passwords, and cookies from over 35 different browsers and 500 other programs. BitRat.rar
Be wary of archives that contain .exe , .scr , or .vbs files when you were expecting a simple document or image. Did you find a file with this name on your computer, or
Phishing Campaign Delivering Three Fileless Malware - Fortinet