Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 14:15:58 UTC
Home > List all groups > List all tools > List all groups using tool oRAT
 Tool: oRAT
Names oRAT
Category Malware
Type Reconnaissance, Backdoor, Info stealer, Tunneling, Exfiltration
Description
(Trend Micro) Another malware family that we obtained both Windows and macOS samples
of during our investigation was oRAT. Interestingly, this was the first time that we had
analyzed samples of this malware family written in the Go language.
Information
<https://www.trendmicro.com/en_us/research/22/d/new-apt-group-earth-berberoka-targets-gambling-websites-with-old.html>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/osx.orat>
Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool oRAT
Changed Name Country Observed
APT groups
  Earth Berberoka 2022  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b999fd13-e5d2-4056-9676-907b6e1be7d0
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b999fd13-e5d2-4056-9676-907b6e1be7d0
Page 1 of 1