HOMETHREATSQuasar RAT
APT / THREAT GROUP

Quasar RAT

5
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Quasar RAT is a malware family written in .NET which is used by a variety of attackers. The malware is fully functional and open source, and is often packed to make analysis of the source more difficult.

Threat Analysis

Quasar RAT is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://researchcenter.paloaltonetworks.com/2017/01/unit42-downeks-and-quasar-rat-used-in-recent-targeted-attacks-against-governments
→http://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/bluebottle-banks-targeted-africa
→https://0x00sec.org/t/master-of-rats-how-to-create-your-own-tracker/20848
→https://adeo.com.tr/wp-content/uploads/2020/02/APT10_Report.pdf
→https://asec.ahnlab.com/en/31089/

Quick Facts

TypeAPT / Threat Group
Aliases5

Also Known As

QuasarRATCinaRATQuasar RATwin.quasar_ratYggdrasil

External Intelligence

Malpedia: win.quasar_rat

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Quasar RAT