RatSnif
- First seen
- 2019-07-01 00:00:00
- Malware type
- rat, spyware
- Family
- Malware family
- Profile updated
- 2026-07-07 12:50:37
Targeted industries: government-and-public-sector financial-services
Targeted regions: country_code:us country_code:ru
Context
RatSnif is a multifunctional remote access tool that allows attackers to capture network traffic and perform various surveillance activities. It is mainly used by cybercriminals to spy on government and financial sector organizations.
Reports & references
- secureworks.com — Tin Woodlawn (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Ratsnif (report)
- threatvector.cylance.com — Threat Spotlight Ratsnif New Network Vermin From Oceanlotus (report)