Skip to content
MalwareWiki

RAT

Cardinal RAT

Cardinal RAT is a remote access Trojan capable of stealing username and credentials, cleaning out cookies from browsers, keylogging and capturing screenshots on targeted systems.

Cardinal RAT is a Windows rat.

Background

Cardinal RAT is a remote access Trojan that can harvest usernames and credentials, wipe browser cookies, log keystrokes, and grab screenshots from the systems it infects. It arrives by way of a downloader called “Carp,” which leverages malicious macros in Microsoft Excel documents to compile embedded source code into an executable that subsequently drops the Cardinal RAT family.

Source: Malpedia (Fraunhofer FKIE).