HOMETHREATSArrowRAT
MALWARE FAMILY

ArrowRAT

Internal ID: win.arrowrat
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

It is available as a service, purchasable by anyone to use in their own campaigns. It’s features are generally fairly typical of a RAT, with its most notable aspect being the hVNC module which basically gives an attacker full remote access with minimal need for technical knowledge to use it.

Threat Analysis

ArrowRAT is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

Quick Facts

TypeMalware Family
Aliases1

Also Known As

win.arrowrat

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
ArrowRAT — Malware Family | Threat Intelligence | CTIWATCH.COM