RogueRaticate
RogueRaticate is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets organisations in the United States and Canada. It uses 4 MITRE ATT&CK techniques and exploits 1 known CVE.
Also known as
- FakeSG
- Techniques
- 4
- Exploited CVEs
- 1
- First seen
- May 1, 2023
- Last seen
- Dec 21, 2023
- Record updated
Who They Target.
Countries · 2
About RogueRaticate.
It compromises legitimate websites (typically WordPress) and injects code that shows a browser-specific update lure (Chrome, Firefox, Edge); the injection uses CSS steganography to hide the malicious request and delivers NetSupport RAT or the DarkGate loader.
Last updated Oct 14, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.