HOMETHREATSPOOLRAT
APT / THREAT GROUP

POOLRAT

4
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: osx.poolrat

Threat Analysis

POOLRAT is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.fox-it.com/2025/09/01/three-lazarus-rats-coming-for-your-cheese/#7ad29534-c69c-41ce-ae8e-99c32f0d11b3
→https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/lazarus-north-korea-indictment
→https://us-cert.cisa.gov/ncas/analysis-reports/ar21-048e
→https://www.3cx.com/blog/news/mandiant-security-update2/
→https://www.acronis.com/en/tru/posts/acronis-tru-alliance-huntio-hunting-dprk-threats-new-global-lazarus-and-kimsuky-campaigns/

Quick Facts

TypeAPT / Threat Group
Aliases4

Also Known As

POOLRATosx.poolratSIMPLESEASIMPLETEA

External Intelligence

Malpedia: osx.poolrat

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search POOLRAT