Ekipa RAT A High-Priced and Evolving Threat for Targeted Attacks

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

Ekipa is a remote access trojan (RAT) that is used for targeted attacks and can be purchased on underground forums for a high price of$3,900. It primarily spreads and operates through the use of Microsoft Office and Visual Basic for Applications. The trojan also comes with a control panel and tools for creating malicious macros in MS Word, Excel add-ins, and MS Publisher.