Malware
CapraRAT
- First Reported
- Jun 3, 2025
- Latest Reported
- Aug 14, 2025
Reported Context (2)
- gathering from India's defense and government sectors. Additionally APT36 uses custom malware such as CapraRAT, often delivered via spear‑phishing emails, enabling persistent espionage against high‑value defense and CloudSEK Warns of Hacktivist Attacks, Phishing and APT Activity Targeting India
- a large VPS hosting provider. Almost a year ago, S1 released a report on APT36 attempting to deliver CapraRAT to their victims. CapraRAT is known to be a modified version of the open-source AndroRAT. APT36 Uses Fake Viber App to Distribute CapraRAT Android Spyware
Malware (2)
Threat Actors (4)
Vendors (1)
Products (2)
Tools (2)
Industries (8)
Countries (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.