Nanocore RAT
Also known as: Nancrat, NanoCore
Nanocore is a Remote Access Tool used to steal credentials and to spy on cameras. It as been used for a while by numerous criminal actors as well as by nation state threat actors.
Linked Threat Actors
C2 Infrastructure
Last 7 days
| Date | C2 Hosts |
|---|---|
| Apr 19, 2026 | 11 |
| Apr 18, 2026 | 2 |
| Apr 17, 2026 | 16 |
| Apr 16, 2026 | 1 |
| Apr 14, 2026 | 1 |
Further Reading
We have been tracking a campaign involving the SpyAgent malware that abuses well-known remote access tools (RATs) — namely TeamViewer — for some time now. While previous versions of the malware hav...
Our research examines how cloud tunneling services work and how organizations can thwart threats that abuse them.
Multistage .NET loader used to spread AZORult and NanoCore Infostealers targeting users in Asian subcontinent, specifically South Korea and Indonesia.
In this article, Zscaler security research team dissect the custom protocols used in some of the most prevalent RATs seen in recent campaigns. Read more.
We assist individuals, SMEs, and F500s alike by providing professional training within the niche field of malware analysis and reverse engineering, without breaking the bank.