APT / THREAT GROUP

Parallax RAT

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Parallax is a Remote Access Trojan used by attackers to gain access to a victim's machine. It was involved in one of the many infamous "coronamalware" campaigns. Basically, the attackers abused the COVID-19 pandemic news to lure victims into opening themed emails spreading parallax.

Threat Analysis

Parallax RAT is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.morphisec.com/parallax-rat-active-status

→https://blog.talosintelligence.com/2020/02/coronavirus-themed-malware.html

→https://threatpost.com/ta2541-apt-rats-aviation/178422/

→https://twitter.com/malwrhunterteam/status/1227196799997431809

→https://www.bleepingcomputer.com/news/security/parallax-rat-common-malware-payload-after-hacker-forums-promotion/

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

ParallaxRATwin.parallaxParallax RAT

External Intelligence

Malpedia: win.parallax

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Parallax RAT