Netskope Threat Labs

NetCat

ATP Sandbox Adv. HeuristicsAV

NetCat is a classic command line networking utility that reads from and writes to network connections, which administrators and cyberattackers both use. Its versatility for opening ports, transferring files, and creating reverse shells makes it a common post exploitation tool, so detections warrant verification against authorized use.

First seen
March 2022
Last seen
October 2026
Netcat
Alert Name
Application.NetCat.AZ
Application.NetCat.BA
Application.Tool.Netcat.M
Win32.Hacktool.NetCat
Win32.Network.NetCat
Win32.Rootkit.Netcat
Win32.Trojan.Netcat