Venom RAT

Internal ID: win.venom

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying win.venom. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

Venom RAT is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://axmahr.github.io/posts/asyncrat-detection/

→https://blog.malwarelab.pl/posts/venom/

→https://blogs.jpcert.or.jp/en/2020/12/quasar-family.html

→https://dti.domaintools.com/VenomRAT/

→https://github.com/jeFF0Falltrades/rat_king_parser

→https://research.checkpoint.com/2024/foxit-pdf-flawed-design-exploitation/

→https://www.cybeseclabs.com/2020/05/07/venom-remote-administration-tool-from-venom-software/

→https://www.politie.nl/nieuws/2025/november/12/11-opnieuw-criminele-infrastructuur-ontmanteld-in-internationale-ransomware-operatie.html

→https://www.rapid7.com/blog/post/2024/11/21/a-bag-of-rats-venomrat-vs-asyncrat/

→https://www.spamhaus.org/resource-hub/botnet-c-c/botnet-threat-update-july-to-december-2025/

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.venom

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Venom RAT