MALWARE FAMILY

Parallax RAT

Internal ID: win.parallax

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Parallax is a Remote Access Trojan used by attackers to gain access to a victim's machine. It was involved in one of the many infamous "coronamalware" campaigns. Basically, the attackers abused the COVID-19 pandemic news to lure victims into opening themed emails spreading parallax.

Threat Analysis

Parallax RAT is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://blog.morphisec.com/parallax-rat-active-status

→https://blog.talosintelligence.com/2020/02/coronavirus-themed-malware.html

→https://threatpost.com/ta2541-apt-rats-aviation/178422/

→https://twitter.com/malwrhunterteam/status/1227196799997431809

→https://www.bleepingcomputer.com/news/security/parallax-rat-common-malware-payload-after-hacker-forums-promotion/

→https://www.bleepingcomputer.com/news/security/unskilled-hacker-linked-to-years-of-attacks-on-aviation-transport-sectors/

→https://www.uptycs.com/blog/cryptocurrency-entities-at-risk-threat-actor-uses-parallax-rat-for-infiltration

→https://www.vkremez.com/2020/02/lets-learn-inside-parallax-rat-malware.html

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.parallax

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Parallax RAT