APT / THREAT GROUP

Spectre Rat

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Mixed RAT and Botnet malware sold in underground forums. In march 2021 it was advertised with the Spectre 2.0, it reached version 3 in June 2021 and then quickly version 4. This crimeware tool was being abused in malicious campaigns targeting European users in September 2021.

Threat Analysis

Spectre Rat is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://medium.com/walmartglobaltech/spectre-spc-v9-campaigns-and-updates-546c2e65e247

→https://yoroi.company/research/spectre-v4-0-the-speed-of-malware-threats-after-the-pandemics/

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

Spectre Ratwin.spectre

External Intelligence

Malpedia: win.spectre

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Spectre Rat