HOMETHREATSUnidentified PS 002 (RAT)
APT / THREAT GROUP

Unidentified PS 002 (RAT)

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

A Powershell-based RAT capable of pulling further payloads, delivered through Russia-themed phishing mails.

Threat Analysis

Unidentified PS 002 (RAT) is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.malwarebytes.com/threat-intelligence/2022/03/new-spear-phishing-campaign-targets-russian-dissidents/
→https://www.bleepingcomputer.com/news/security/phishing-campaign-targets-russian-govt-dissidents-with-cobalt-strike/

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

Unidentified PS 002 (RAT)ps1.unidentified_002

External Intelligence

Malpedia: ps1.unidentified_002

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Unidentified PS 002 (RAT)
Unidentified PS 002 (RAT) — APT / Threat Group | Threat Intelligence | CTIWATCH.COM