Names | AlienSpy | |
Category | Tools | |
Type | Reconnaissance, Backdoor, Keylogger, Credential stealer, Info stealer, Exfiltration, Miner | |
Description | (Proofpoint) The AlienSpy RAT is very powerful in the hands of an attacker. Some of the key features supported by the RAT include: • Collection of system information for fingerprinting and displaying on the attacker’s controller dashboard • File system, process and registry explorer with ability to view and modify • Ability to run console commands • Keylogging to capture user inputs • Ability to download and execute secondary payloads • Credential theft from various browser stores • Ability to spy on victim through screenshots, webcam, microphone • Ability to RDP (Remote Desktop) to infected clients • Ability to mine various type of digital currency such as bitcoin, litecoin, dogecoin etc. | |
Information | <https://www.proofpoint.com/us/threat-insight/post/You-Dirty-RAT> | |
AlienVault OTX | <https://otx.alienvault.com/browse/pulses?q=tag:alienspy> |
Last change to this tool card: 22 April 2020
Download this tool card in JSON format
Previous: Alice
Next: Alina POS
Changed | Name | Country | Observed | ||
APT groups | |||||
Packrat | [Latin America] | 2008 |
1 group listed (1 APT, 0 other, 0 unknown)
Thailand Computer Emergency Response Team (ThaiCERT) Follow us on![]() ![]() |
Report incidents |
|
![]() |
+66 (0)2-123-1234 | |
![]() |
report@thaicert.or.th | |
![]() |
Download PGP key |