Netskope Threat Labs

Ratsnif

ATP Sandbox Adv. Heuristics

Ratsnif is a network sniffing tool used by the OceanLotus intrusion set, which researchers documented as new network monitoring malware in the group's arsenal.

First seen
May 2023
Last seen
September 2026
Alert Name
Win32.Trojan.Ratsnif