Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:07:14 UTC
Home > List all groups > List all tools > List all groups using tool FatalRAT
 Tool: FatalRAT
Names
FatalRAT
Sainbox RAT
Category Malware
Type Backdoor
Description
(Kaspersky) Other research groups, in particular LevelBlue (formerly AT&T Security) and
Antiy, described FatalRAT in detail, but Kaspersky Threat Attribution Engine (KTAE) showed
only a 73–76% code match with the described versions of FatalRAT, prompting us to describe
a new version of this malware.
Information
Malpedia Last change to this tool card: 02 March 2025
Download this tool card in JSON format
All groups using tool FatalRAT
Changed Name Country Observed
APT groups
 Operation SalmonSlalom 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=22c36baa-b5ae-4584-915a-9fa49fa968b3
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=22c36baa-b5ae-4584-915a-9fa49fa968b3
Page 1 of 1