Sakula RAT
Also known as: Sakurel
Sakula / Sakurel is a trojan horse that opens a back door and downloads potentially malicious files onto the compromised computer.
Linked Threat Actors
APT 26Hurricane Panda
Last 7 days
Apr 19, 2026
C2 Hosts: 1
Apr 17, 2026
C2 Hosts: 1
Apr 16, 2026
C2 Hosts: 1
Apr 15, 2026
C2 Hosts: 1
Apr 13, 2026
C2 Hosts: 1
| Date | C2 Hosts |
|---|---|
| Apr 19, 2026 | 1 |
| Apr 17, 2026 | 1 |
| Apr 16, 2026 | 1 |
| Apr 15, 2026 | 1 |
| Apr 13, 2026 | 1 |
Further Reading
Cyber-Defence/Technical Notes/Sakula at master · nccgroup/Cyber-Defence
Information released publicly by NCC Group's Cyber Incident Response Team - nccgroup/Cyber-Defence
github.com
SonicALERT: CVE 2014-0322 Malware - Sakurel (Feb 21, 2014)
MySonicWALL: Register and Manager your SonicWALL Products and services
web.archive.org
Unknown APT group has targeted Russia repeatedly since Ukraine invasion - ThreatDown by Malwarebytes
An unknown Advanced Persistent Threat (APT) group has targeted Russian government entities with at least four separate spear phishing campaigns since late February, 2022. The campaigns…
malwarebytes.com
Risk Detected
security center detected writeup
symantec.com