XRat
- First seen
- 2015-06-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-07-20 00:39:16
- Profile updated
- 2026-07-07 15:46:09
Targeted industries: education-and-nonprofits financial-services healthcare-and-pharmaceutical manufacturing retail-and-hospitality technology-and-telecommunications
Context
XRat is a ransomware malware that encrypts files on the affected system. It is used in cyber-attacks to extort money from victims by holding their data hostage.
Used by threat actors
- Kimsuky (threat-actor)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Apk.Xrat (report)
- jsac.jpcert.or.jp — Jsac2021 202 Niwa Yanagishita En (report)
- asec.ahnlab.com — 59590 (report)
- blog.lookout.com — Xrat Mobile Threat (report)
- github.com — Xrat (report)