Trusted Design

Winnti is now targeting pharmaceutical companies

概要

For a long time the Winnti group had been considered as a Chinese threat actor targeting gaming companies specifically. Recently, we’ve seen information indicating that the scope of targets can be wider and is no longer limited to the entertainment business. We actually track samples of Winnti malware all the time, but so far we haven’t been able to catch one with solid clues indicating other targeted industries. Also our visibility as a vendor does not cover every company in the world (at least so far ;)) and the Kaspersky Security Network (KSN) did not reveal other attacks except those against gaming companies. Well, sometimes targeted entities have included telecommunication companies, or better, large holdings, but it seems that at least one of their businesses was in some way related to the production or distribution of computer games.

Created: 2026-02-23

Indicators

• FileHash-MD5 - 8e61219b18d36748ce956099277cc29b -
• FileHash-MD5 - ac9b247691b1036a1cdb4aaf37bea97f -
• FileHash-MD5 - 5979cf5018c03be2524b87b7dda64a1a -

類似Pulses

• An Update on Winnti (score: 0.57)
• Multiple Malwares used to Target an Asian Financial Institution (score: 0.51)
• Threat Group-3390 Targets Organizations for Cyberespionage (score: 0.51)
• TrendLabs: Spam Campaign Delivers Cross-platform Remote Access Trojan Adwind (score: 0.50)
• Operation C-Major actors used Mobile Spyware Against Targets (score: 0.50)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る