Toxiceye.rar -

The bot token is embedded into the ToxicEye configuration and compiled into an executable (.exe).

Steals credentials, browser history, cookies, and clipboard contents. ToxicEye.rar

Watch for unusual traffic to Telegram servers from devices that do not have the app installed. The bot token is embedded into the ToxicEye

For further technical details, researchers at Check Point Research and The Hacker News have published comprehensive analyses of this threat. ToxicEye RAT hits Telegram app to spy, steal user data steal user data Can delete

Can delete, transfer, or encrypt files for ransom (AES-256 encryption).

The malware grants attackers nearly full control over a victim's machine:

Terminate active processes and take over the Task Manager.