Skip to main content

Glossary

Remote Access Trojan (RAT)

A type of trojan malware that gives an attacker covert, persistent remote control over an infected system, typically including capabilities like file transfer, keystroke logging, and webcam or microphone access. RATs are frequently used to establish a long-term foothold for further lateral movement or data theft.

// Recent coverage mentioning Remote Access Trojan (RAT)

Flying Eagle Mobile RAT Builder: China's Infostealer-as-a-Service
HIGH
Malware

Flying Eagle Mobile RAT Builder: China's Infostealer-as-a-Service

Analysis of the 'Flying Eagle' mobile RAT builder, a sophisticated malware-as-a-service platform from China, used by threat groups to deploy infostealers targeting…

Runtime Rebel Intel
4 min read · Jul 30, 2026
Compromised Joyfill npm Packages Deliver DEV#POPPER RAT
HIGH
Supply Chain

Compromised Joyfill npm Packages Deliver DEV#POPPER RAT

Beta versions of @joyfill/layouts and @joyfill/components npm packages compromised to deliver a DEV#POPPER RAT upon import. Node.js users at risk.

Runtime Rebel Intel
5 min read · Jul 29, 2026
MA
HIGH
Malware

Dolphin X Malware: AI-Driven Target Prioritization & Defense

Analysis of Dolphin X, a new RAT utilizing AI to profile and rank victims, enabling threat actors to prioritize high-value targets for data exfiltration and further…

Runtime Rebel Intel
5 min read · Jul 24, 2026
Malicious Vite npm Packages Deliver RAT via Blockchain C2
HIGH
Supply Chain

Malicious Vite npm Packages Deliver RAT via Blockchain C2

Seven malicious npm packages target Vite frontend projects. Dubbed ViteVenom, this software supply chain attack uses a four-tier blockchain C2 to deploy a RAT.

Runtime Rebel Intel
4 min read · Jul 17, 2026
MA
HIGH
Malware

NetSupport RAT Infection: How to Detect Unidentified Loader Exploits

Analyze the multi-stage infection chain of an unidentified loader delivering NetSupport RAT, featuring technical breakdowns of JavaScript and PowerShell TTPs.

Runtime Rebel Intel
4 min read · Jun 1, 2026
DPRK's 'Contagious Interview' Spreads RATs via Dev Repositories
HIGH
Threat Intel

DPRK's 'Contagious Interview' Spreads RATs via Dev Repositories

DPRK threat actors are employing a 'contagious interview' scam, weaponizing compromised developer repositories to propagate RATs and malware across the software supply…

Runtime Rebel Intel
5 min read · Apr 22, 2026

← All 285 glossary terms