สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency

Report

Home > List all groups > List all tools > List all groups using tool FatalRAT

Threat Group Cards: A Threat Actor Encyclopedia

Tool: FatalRAT

Names	FatalRAT Sainbox RAT
Category	Malware
Type	Backdoor
Description	(Kaspersky) Other research groups, in particular LevelBlue (formerly AT&T Security) and Antiy, described FatalRAT in detail, but Kaspersky Threat Attribution Engine (KTAE) showed only a 73–76% code match with the described versions of FatalRAT, prompting us to describe a new version of this malware.
Information	<https://ics-cert.kaspersky.com/publications/reports/2025/02/24/fatalrat-attacks-in-apac-backdoor-delivered-via-an-overly-long-infection-chain-to-chinese-speaking-targets/>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.fatal_rat>

Last change to this tool card: 02 March 2025

Download this tool card in JSON format

All groups using tool FatalRAT

Changed	Name	Country	Observed
APT groups
	Operation SalmonSlalom		2025

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Report incidents

+66 (0)2-123-1227

[email protected]