Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
RAT

PLEAD

RAT Needs review 14 detections found
This entry hasn't been reviewed yet. It was auto-detected from the MITRE ATT&CK catalog because it self-identifies as rat-type malware, but no one has curated a full summary or double-checked its reference links. Treat the details below as a starting point, not a verified profile.

Also known as: PLEAD

Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0435) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's currently known; a proper summary and authoritative eradication references are pending.

Detection & eradication references

Curated links to authoritative sources — MITRE ATT&CK, CISA advisories, law-enforcement takedown announcements, and vendor threat-intel writeups — for removal, remediation, and further technical detail. Sigma Watch does not publish its own removal steps here, since malware behavior and tooling change too fast for a static write-up to stay reliably accurate.

Detection rules

Source Rule Status Updated
suricata ET MALWARE Plead TSCookie CnC Checkin M2 rev 3 2024-04-21
suricata ET MALWARE Plead TSCookie CnC Checkin M1 rev 3 2024-04-21
suricata ET MALWARE Plead TSCookie CnC Checkin M4 rev 3 2024-04-21
suricata ET MALWARE Plead TSCookie CnC Checkin M3 rev 3 2024-04-21
suricata ET MALWARE BlackTech/PLEAD TSCookie CnC Checkin M2 rev 4 2024-04-21
suricata ET MALWARE BlackTech/PLEAD TSCookie CnC Checkin M1 rev 6 2024-04-20
suricata ET MALWARE BlackTech Plead Encrypted Payload Inbound rev 5 2024-03-07
snort ET TROJAN BlackTech Plead Encrypted Payload Inbound rev 3 2019-10-24
snort ET TROJAN Plead TSCookie CnC Checkin M2 rev 2 2019-09-18
snort ET TROJAN Plead TSCookie CnC Checkin M3 rev 2 2019-09-18
snort ET TROJAN Plead TSCookie CnC Checkin M4 rev 2 2019-09-18
snort ET TROJAN Plead TSCookie CnC Checkin M1 rev 2 2019-09-18
snort ET TROJAN BlackTech/PLEAD TSCookie CnC Checkin M1 rev 4 2018-11-01
snort ET TROJAN BlackTech/PLEAD TSCookie CnC Checkin M2 rev 2 2018-11-01