Qarallax
Aliases: qrat
- First seen
- 2015-01-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Last IoC activity
- 2026-07-21 00:32:50
- Profile updated
- 2026-07-07 15:41:35
Targeted industries: government-and-public-sector
Targeted regions: country_code:ch
Context
Travelers applying for a US Visa in Switzerland were recently targeted by cyber-criminals linked to a malware called QRAT. Twitter user @hkashfi posted a Tweet saying that one of his friends received a file (US Travel Docs Information.jar) from someone posing as USTRAVELDOCS.COM support personnel using the Skype account ustravelidocs-switzerland (notice the “i” between “travel” and “docs”).
Reports & references
- labsblog.f-secure.com — Qarallax Rat Spying On Us Visa Applicants (report)