SparkRAT
- First seen
- 2022-01-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Related IoCs
- 57 (57 malicious)
- Last IoC activity
- 2026-10-18 04:11:20
- Profile updated
- 2026-07-07 13:09:26
Context
SparkRAT is a cross-platform, open-source Remote Administration Tool (RAT) written in Go and released on GitHub in 2022. Compatible with Windows, macOS, and Linux systems, it offers extensive remote access capabilities, including file and process management, file transfer, remote desktop monitoring, system information collection, and command execution via terminal access.
Exploited vulnerabilities
- CVE-2024-4351 (vulnerability)
Reports & references
- clearskysec.com — 0D Vulnerability Exploited In The Wild (report)
- recordedfuture.com — Tag 100 Uses Open Source Tools In Suspected Global Espionage Campaign (report)
- thehackernews.com — Chinese Hackers Rednovember Target (report)
- Kaspersky — 114990 (report)
- sentinelone.com — Dragonspark Attacks Evade Detection With Sparkrat And Golang Source Code Interpretation (report)
- blog.exatrack.com — Melofee (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Spark Rat (report)
- github.com — Spark (report)
- hunt.io — Sparkrat Server Detection Macos Activity And Malicious Connections (report)
- asec.ahnlab.com — 52899 (report)
- clearskysec.com — Zero Day Cve 2024 4351 Report (report)
- Microsoft — Microsoft Research Uncovers New Zerobot Capabilities (report)
- asec.ahnlab.com — 56715 (report)