Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 19:09:01 UTC
Home > List all groups > List all tools > List all groups using tool PikoloRAT
 Tool: PikoloRAT
Names PikoloRAT
Category Malware
Type Backdoor
Description
(NSFOCUS) NSFOCUS discovered another new remote control trojan, PikoloRAT, during the
in-depth analysis of the relevant information of this operation. PikoloRAT comes with typical
remote control functions and can use built-in components to implement more complex control
operations.
Since the built-in C&C addresses of PikoloRAT were found to coincide with the addresses
used in this operation and PikoloRAT could complement the above-mentioned DarkMe,
NSFOCUS Security Labs believed that PikoloRAT was used as an extension component by
Evilnum attackers in the later stage of this operation.
Information
Last change to this tool card: 30 November 2023
Download this tool card in JSON format
All groups using tool PikoloRAT
Changed Name Country Observed
APT groups
 DarkCasino [Unknown] 2021
1 group listed (1 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=71942470-aef2-40d6-b218-5dc10e02ba9e
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=71942470-aef2-40d6-b218-5dc10e02ba9e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=71942470-aef2-40d6-b218-5dc10e02ba9e
Page 2 of 2

APT groups  DarkCasino [Unknown] 2021
1 group listed (1 APT, 0 other, 0 unknown) 
   Page 1 of 2