NetWire claim to be the first Multi-platform RAT, it can generate output for Windows, Linux, Solaris and Mac OS X. But the client work only in Windows.
The CitizenLab published their report of the Blackshades RAT used by Syrian Electronic Army against activists. No need repeat their excellent analysis but you wish to analyze Blackshades and other RAT that were used in the Syrian attacks, here are the samples for
Authenticate customers, detect fraud and protect against malicious users across all channels Deliver seamless customer experiences and build digital identity trust with AI-powered, real-time fraud detection Real-time fraud detection across digital channels
1
Home - Broadcom Community - Discussion Forums, Technical Docs, Ideas and Blogs
Endpoint Protection - Symantec Enterprise
Android Malware Eavesdrops on Users, Uses Google+ as Disguise
Malware in your Mouse can act as RAT for Cyber Criminals
http://labs.alienvault.com/labs/index.php/2012/tracking-down-the-author-of-the-plugx-rat/
NetWire first Multi-platform RAT
DarkComet RAT Author Terminates Project Because of the Misuse of the Tool
Endpoint Protection - Symantec Enterprise
http://labs.alienvault.com/labs/index.php/2012/nmap-script-to-detect-poison-ivy-clients/
http://labs.alienvault.com/labs/index.php/2012/capfire4-malware-rat-software-and-cc-service-together/
RAT samples from Syrian Targeted attacks - Blackshades RAT, XTreme RAT, Dark Comet RAT used by Syrian Electronic Army
http://payperinstall-ppi.blogspot.com/2012/02/cracked-clientmesh-rat-v40.html
Trusteer Solutions | Fraud Detection - IBM
Android Malware Eavesdrops on Users, Uses Google+ as Disguise
DarkComet-RAT v4.2 fwb (Firewall bypass)
DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable