SparkRAT is an open-source, cross-platform remote-access Trojan released publicly in 2022. It supports Windows, macOS, and Linux, uses a modular design, and provides operators with a web-based management interface. Threat actors have deployed it after exploiting vulnerable systems, including campaigns involving CVE-2024-27198, and in espionage operations targeting government organizations. Because it is publicly available and used by different actors, attribution should rely on delivery infrastructure and surrounding tradecraft rather than the presence of SparkRAT alone.