
| Names | FatalRAT Sainbox RAT | |
| Category | Malware | |
| Type | Backdoor | |
| Description | (Kaspersky) Other research groups, in particular LevelBlue (formerly AT&T Security) and Antiy, described FatalRAT in detail, but Kaspersky Threat Attribution Engine (KTAE) showed only a 73–76% code match with the described versions of FatalRAT, prompting us to describe a new version of this malware. | |
| Information | <https://ics-cert.kaspersky.com/publications/reports/2025/02/24/fatalrat-attacks-in-apac-backdoor-delivered-via-an-overly-long-infection-chain-to-chinese-speaking-targets/> | |
| Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/win.fatal_rat> | |
Last change to this tool card: 02 March 2025
Download this tool card in JSON format
Previous: FastPOS
Next: FatDuke
| Changed | Name | Country | Observed | ||
APT groups | |||||
| Operation SalmonSlalom | 2025 | ||||
1 group listed (1 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||