Cobian RAT

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.cobian_rat

Threat Analysis

Cobian RAT is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://cocomelonc.github.io/tutorial/2022/04/20/malware-pers-1.html

→https://securityaffairs.co/wordpress/62573/malware/cobian-rat-backdoor.html

→https://www.zscaler.com/blogs/research/cobian-rat-backdoored-rat

→https://yoroi.company/research/the-wayback-campaign-a-large-scale-operation-hiding-in-plain-sight/

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

win.cobian_ratCobian RAT

External Intelligence

Malpedia: win.cobian_rat

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Cobian RAT