Netskope Threat Labs

BruteRatel

ATP Sandbox Adv. HeuristicsNetskope IPS

BruteRatel (Brute Ratel C4) is a commercial command and control tool marketed for authorized threat simulation that gives operators deep control over compromised hosts. Like other dual use red team tooling, its detections warrant verification against authorized testing before responders treat them as malicious activity.

First seen
July 2022
Last seen
September 2026
Alert Name
Script-JS.Trojan.BruteRatel
Win32.Trojan.BruteRatel
Win64.Backdoor.BruteRatel
Win64.Trojan.BruteRatel