OxtaRAT
- First seen
- 2022-05-01 00:00:00
- Malware type
- rat, keylogger, screen-capture
- Family
- Malware family
- Related IoCs
- 2 (2 malicious)
- Last IoC activity
- 2026-10-02 16:46:29
- Profile updated
- 2026-07-07 15:14:56
Targeted industries: government-and-public-sector financial-services
Targeted regions: country_code:ir country_code:sa
Context
OxtaRAT is a remote access tool predominantly used in targeted attacks. It has capabilities for keylogging, screenshot capturing, and unauthorized access to compromised systems.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Oxtarat (report)
- research.checkpoint.com — Operation Silent Watch Desktop Surveillance In Azerbaijan And Armenia (report)