Cannibal Rat
- First seen
- 2018-03-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Profile updated
- 2026-07-07 14:51:34
Targeted industries: education-and-nonprofits government-and-public-sector
Targeted regions: country_code:br
Context
Cannibal Rat is a python written remote access trojan with 4 versions as of March 2018. The RAT is reported to impact users of a Brazilian public sector management school. The RAT is distributed in a py2exe format, with the python27.dll and the python bytecode stored as a PE resource and the additional libraries zipped in the overlay of the executable.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Cannibal Rat (report)
- Cisco Talos — Cannibalrat Targets Brazil (report)