Netskope Threat Labs

SparkRAT

ATP Sandbox Adv. HeuristicsAVNetskope IPS

SparkRAT is a cross-platform, open source remote administration tool written in Go and released on GitHub in 2022. It runs on Windows, macOS, and Linux and offers file and process management, file transfer, remote desktop monitoring, system information collection, and terminal command execution, and its free availability has drawn abuse from cyberattackers.

First seen
February 2024
Last seen
October 2026
Sparkrat
Alert Name
Linux.Trojan.SparkRAT
MacOS.Trojan.SparkRAT
Trojan.Linux.SparkRAT.A
Win32.Backdoor.Sparkrat
Win32.Backdoor.SparkRAT
Win32.Trojan.SparkRAT
Win64.Backdoor.Sparkrat