Ratty
- First seen
- 2016-01-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Last IoC activity
- 2026-07-21 12:58:26
- Profile updated
- 2026-07-07 15:46:07
Context
Ratty is an open source Java RAT, made available on GitHub and promoted heavily on HackForums. At some point in 2016 / 2017 the original author deleted his repository, but several clones exist.
Detection coverage
- 1 YARA rules
Detection rules
- DITEKSHEN_MALWARE_Win_Ratty (yara-rule)
Reports & references
- threatresearch.ext.hp.com — Javascript Malware Dispensing Rats Into The Wild (report)
- securityinbits.com — Interesting Tactic By Ratty Adwind Distribution Of Jar Appended To Signed Msi (report)
- malpedia.caad.fkie.fraunhofer.de — Jar.Ratty (report)
- fortinet.com — Multilayered Email Attack How A Pdf Invoice And Geofencing Led To Rat Malware (report)
- github.com — Ratty (report)