Trusted Design

BBSRAT Attacks Targeting Russian Orgs Linked to Roaming Tiger

概要

In late 2014, ESET presented an attack campaign that had been observed over a period of time targeting Russia and other Russian speaking nations, dubbed “Roaming Tiger”. The attack was found to heavily rely on RTF exploits and at the time, thought to make use of the PlugX malware family. The adversaries behind these attacks continued to target Russia and other Russian speaking nations using similar exploits and attack vectors. However, while the malware used in these new attacks uses similar infection mechanisms to PlugX, it is a completely new tool with its own specific behavior patterns and architecture. We have named this tool “BBSRAT.”

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• BBSRAT Attacks Targeting Russian Organizations (score: 0.97)
• Targeted Attack Distributes PlugX in Russia (score: 0.68)
• A Look Into Fysbis: Sofacy’s Linux Backdoor (score: 0.63)
• Defending the White Elephant (score: 0.62)
• RuMMS: The Latest Family of Android Malware (score: 0.61)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る