H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

Kivars

[Kivars](https://attack.mitre.org/software/S0437) is a modular remote access tool (RAT), derived from the Bifrost RAT, that was used by [BlackTech](https://attack.mitre.org/groups/G0098) in a 2010 campaign.(Citation: TrendMicro BlackTech June 2017)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Kivars](https://attack.mitre.org/software/S0437) is a modular remote access tool (RAT), derived from the Bifrost RAT, that was used by [BlackTech](https://attack.mitre.org/groups/G0098) in a 2010 campaign.(Citation: TrendMicro BlackTech June 2017)

Labels

malware
8 recorded

Relationships

uses
from BlackTech
Group
uses
to File and Directory Discovery
Technique
uses
to File Deletion
Technique
uses
to Hidden Window
Technique
uses
to Ingress Tool Transfer
Technique
uses
to Keylogging
Technique
uses
to Remote Services
Technique
uses
to Screen Capture
Technique
2 external

References

mitre-attack
S0437
open
TrendMicro BlackTech June 2017
https://blog.trendmicro.com/trendlabs-security-intelligence/following-trail-blacktech-cyber-espionage-campaigns/
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance