Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 20:01:24 UTC
Home > List all groups > List all tools > List all groups using tool ObliqueRAT
 Tool: ObliqueRAT
Names
ObliqueRAT
Oblique RAT
Category Malware
Type Reconnaissance, Backdoor, Dropper, Exfiltration
Description
(Talos) Cisco Talos has recently discovered a new campaign distributing a malicious
remote access trojan (RAT) family we're calling 'ObliqueRAT.' Cisco Talos also
discovered a link between ObliqueRAT and another campaign from December 2019
distributing Crimson RAT sharing similar maldocs and macros. CrimsonRAT has been
known to target diplomatic and government organizations in Southeast Asia.
Information
MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool ObliqueRAT
Changed Name Country Observed
APT groups
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4cd8fd56-3b1e-4e12-90b1-9dd8c4b84793
Page 1 of 2

Transparent Tribe, APT 36 2013-Mar 2025  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4cd8fd56-3b1e-4e12-90b1-9dd8c4b84793
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4cd8fd56-3b1e-4e12-90b1-9dd8c4b84793
Page 2 of 2