Trusted Design

Digital Attack on German Parliament

概要

Servers of The Left in German Bundestag have been infected with malware, apparently by a state-sponsored group of Russian origin. This is the summary of an analysis by an IT security researcher, which we publish in full. The in-depth report provides an analysis of technology, impact, possible attribution – and a signature to detect the malware.

Created: 2026-02-23

Indicators

• FileHash-SHA256 - 566ab945f61be016bfd9e83cc1b64f783b9b8deb891e6d504d3442bc8281b092 -
• FileHash-SHA256 - 730a0e3daf0b54f065bdd2ca427fbe10e8d4e28646a5dc40cbcfb15e1702ed9a -
• FileHash-SHA256 - b12fa566e808c406e038af46012a8a28b76f58661872c0f76d12d9765aefa076 -
• hostname - microsoft.checkwinframe.com -
• YARA - 2c36674e3e5b15a7b8b46400666bafb55264b7fb -
• hostname - update.adobeincorp.com -
• FileHash-SHA256 - 5f6b2a0d1d966fc4f1ed292b46240767f4acb06c13512b0061b434ae2a692fa1 -
• YARA - 456da7fe6aad1eae949f42b6b187fa6616a119f5 -
• hostname - winnt.check-fix.com -
• YARA - a5847b97c727258d54f1d9e7867d2731df8bf91c -
• YARA - 43ae9a004ffaa736c2565b7063bb2f3e0304cf55 -
• FileHash-MD5 - f8292b67f20861a61d0716ebcfe56495 -
• FileHash-SHA256 - 5130f600cd9a9cdc82d4bad938b20cbd2f699aadb76e7f3f1a93602330d9997d -
• YARA - 7d5c5ddfbb53bf83edc1c9ffadd98d5b93f0314b -
• FileHash-MD5 - 77e7fb6b56c3ece4ef4e93b6dc608be0 -
• FileHash-MD5 - 5e70a5c47c6b59dae7faf0f2d62b28b3 -

類似Pulses

• Compromised Turkish Government Web site leads to malware (score: 0.62)
• Aggressive Malware Pushers: Prolific Cyber Surfers Beware (score: 0.60)
• The Curious Case of an Unknown Trojan Targeting German-Speaking Users (score: 0.60)
• Defending the White Elephant (score: 0.60)
• A Look Into Fysbis: Sofacy’s Linux Backdoor (score: 0.60)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る