NanoCore RAT
Description
Nanocore is a Remote Access Tool used to steal credentials and to spy on cameras. It has been used for a while by numerous criminal actors as well as by nation state threat actors.
Names
| Name |
|---|
| NanoCore RAT |
| NanoCore |
| Nancrat |
| Zurten |
| Atros2.CKPN |
Category
Malware
Type
- Backdoor
- Info stealer
- Credential stealer
Information
- https://blog.morphisec.com/nanocore-under-the-microscope
- https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html
- https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/
- https://www.bleepingcomputer.com/news/security/nanocore-rat-author-gets-33-months-in-prison/
- https://blog.talosintelligence.com/2022/01/nanocore-netwire-and-asyncrat-spreading.html
Mitre Attack
Malpedia
Alienvault Otx
Other Information
Uuid
9b69c2d2-7c21-4b16-b039-2400387dd956
Last Card Change
2022-01-25