SpiceRAT

Reported Context (1)

This research was carried out jointly with researcher Guy Yasur. Together, we tracked a cluster of SpiceRAT command and control servers active from late 2025 through August 2026 across a small subset of European hosting Researchers Map SpiceRAT-Linked Infrastructure Impersonating Central Asian Government and Energy Targets

Malware (3)

People (1)

Threat Actors (3)

MITRE ATT&CK (3)

Vendors (4)

Tools (2)

Industries (3)

Countries (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.