Netskope Threat Labs

OzoneRAT

ATP Sandbox Adv. Heuristics

OzoneRAT is a remote access trojan that has appeared in campaigns against German speakers, hospitality and travel organizations, and in recent pro-Ukrainian hacktivist operations. Researchers have documented its delivery through spam and lures across its lifetime.

First seen
June 2024
Last seen
October 2026
Alert Name
Win32.Downloader.OzoneRAT