Ragnatela
- First seen
- 2023-01-01 00:00:00
- Malware type
- rat
- Profile updated
- 2026-07-07 14:47:54
Targeted industries: government-and-public-sector
Targeted regions: country_code:pk
Context
Malwarebytes Lab identified a new variant of the BADNEWS RAT called Ragnatela. It is being distributed via spear phishing emails to targets of interest in Pakistan. Ragnatela, which means spider web in Italian, is also the project name and panel used by Patchwork APT. Ironically, the threat actor infected themselves with their own RAT.
Related threat objects
- BADNEWS (malware)
Reports & references
- blog.malwarebytes.com — Patchwork Apt Caught In Its Own Web (report)