SparkRAT
- First seen
- 2022-01-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Last IoC activity
- 2026-07-19 03:12:36
- Profile updated
- 2026-07-07 13:09:26
Context
SparkRAT is a cross-platform, open-source Remote Administration Tool (RAT) written in Go and released on GitHub in 2022. Compatible with Windows, macOS, and Linux systems, it offers extensive remote access capabilities, including file and process management, file transfer, remote desktop monitoring, system information collection, and command execution via terminal access.
Exploited vulnerabilities
- CVE-2024-4351 (vulnerability)
Reports & references
- sentinelone.com — Dragonspark Attacks Evade Detection With Sparkrat And Golang Source Code Interpretation (report)
- clearskysec.com — 0D Vulnerability Exploited In The Wild (report)
- recordedfuture.com — Tag 100 Uses Open Source Tools In Suspected Global Espionage Campaign (report)
- thehackernews.com — Chinese Hackers Rednovember Target (report)
- Kaspersky — 114990 (report)
- blog.exatrack.com — Melofee (report)
- Microsoft — Microsoft Research Uncovers New Zerobot Capabilities (report)
- asec.ahnlab.com — 56715 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Spark Rat (report)
- github.com — Spark (report)
- hunt.io — Sparkrat Server Detection Macos Activity And Malicious Connections (report)
- asec.ahnlab.com — 52899 (report)
- clearskysec.com — Zero Day Cve 2024 4351 Report (report)