| SYMBOL | COMMON_NAME | aka. SYNONYMS |
The Bitter threat group initially started using RAT tools in their campaigns, as the first Bitter versions, for Android released in 2014 were based on the AndroRAT framework. Over time, they switched to a custom version that has been known as BitterRAT ever since.
| 2026-04-08
⋅
Lookout
⋅
Beyond BITTER: MENA Civil Society Targeted in Hack-For-Hire Operation Linked to BITTER APT ProSpy |
| 2025-06-04
⋅
Threatray
⋅
The Bitter End: Unraveling Eight Years of Espionage Antics – Part Two AlmondRAT AlmondRAT Artra Downloader BDarkRAT Havoc KiwiStealer KugelBlitz MiyaRAT ORPCBackdoor WmRAT ZxxZ |
| 2025-05-28
⋅
EclecticIQ
⋅
Pakistan Telecommunication Company (PTCL) Targeted by Bitter APT During Heightened Regional Conflict WmRAT |
| 2024-12-17
⋅
Proofpoint
⋅
Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs MiyaRAT WmRAT HAZY TIGER |
| 2024-10-12
⋅
Qianxin
⋅
Bitter Group Launches New Trojan Miyarat, Domestic Users Become Primary Ttargets MiyaRAT |
| 2022-08-09
⋅
cyble
⋅
Bitter APT Group Using “Dracarys” Android Spyware Dracarys |
| 2022-07-05
⋅
SECUINFRA
⋅
Whatever floats your Boat – Bitter APT continues to target Bangladesh AlmondRAT Artra Downloader Bitter RAT ZxxZ |
| 2022-06-08
⋅
Qianxin Threat Intelligence Center
⋅
Operation Tejas: A dying elephant curled up in the Kunlun Mountains HAZY TIGER RAZOR TIGER |
| 2022-05-11
⋅
Cisco Talos
⋅
Bitter APT adds Bangladesh to their targets AndroRAT Artra Downloader Bitter RAT ZxxZ |
| 2022-04-28
⋅
PWC
⋅
Cyber Threats 2021: A Year in Retrospect BPFDoor APT15 APT31 APT41 APT9 BlackTech BRONZE EDGEWOOD DAGGER PANDA Earth Lusca HAFNIUM HAZY TIGER Inception Framework LOTUS PANDA QUILTED TIGER RedAlpha Red Dev 17 Red Menshen Red Nue VICEROY TIGER |
| 2020-06-16
⋅
Bitdefender
⋅
BitterAPT Revisited: the Untold Evolution of an Android Espionage Tool AndroRAT Artra Downloader Bitter RAT HAZY TIGER |