Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 17:47:09 UTC
Home > List all groups > List all tools > List all groups using tool CetaRAT
 Tool: CetaRAT
Names CetaRAT
Category Malware
Type Backdoor
Description
(Talos) SideCopy’s staple RAT first seen in the wild in 2019. This was already disclosed
publicly. We are calling it “CetaRAT” to identify it throughout this research piece.
Information
<https://s3.amazonaws.com/talos-intelligence-site/production/document_files/files/000/095/591/original/062521_SideCopy_%281%29.pdf?
1625657388>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.ceta_rat>
AlienVault OTX <https://otx.alienvault.com/browse/global/pulses?q=tag:cetarat>
Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool CetaRAT
Changed Name Country Observed
APT groups
  SideCopy 2019-Mar 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=af1983b4-7f79-40c4-aca5-8b0812ec8007
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=af1983b4-7f79-40c4-aca5-8b0812ec8007
Page 1 of 1