Trusted Design

USB Thief

概要

A unique data-stealing Trojan has been spotted on USB devices in the wild – and it is different from typical data-stealing malware. Each instance of this Trojan relies on the particular USB device on which it is installed and it leaves no evidence on the compromised system. Moreover, it uses a very special mechanism to protect itself from being reproduced or copied, which makes it even harder to detect.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Absolute Computrace (score: 0.57)
Trojan:Win32/Usbine (score: 0.56)
Fauxpersky: CredStealer malware written in AutoHotKey masquerades as Kaspersky Antivirus, spreading through infecting USB drives (score: 0.54)
Android Lollipop and Marshmallow financial Trojan (score: 0.52)
Rootnik Android Trojan Abuses Commercial Rooting Tool (score: 0.51)

このPulseに関連する脅威アクター (事実ベース)

APT37

Score: 10.56

Matched TTPs:

T1123 - Audio Capture
T1102.002 - Bidirectional Communication
T1529 - System Shutdown/Reboot

MITREへのリンク →

OilRig

Score: 11.62

Matched TTPs:

T1025 - Data from Removable Media
T1587.001 - Malware
T1588.003 - Code Signing Certificates
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

MITREへのリンク →

Gamaredon Group

Score: 19.70

Matched TTPs:

T1025 - Data from Removable Media
T1091 - Replication Through Removable Media
T1041 - Exfiltration Over C2 Channel
T1001 - Data Obfuscation
T1102.002 - Bidirectional Communication
T1561.001 - Disk Content Wipe

MITREへのリンク →

APT28

Score: 13.59

Matched TTPs:

T1025 - Data from Removable Media
T1091 - Replication Through Removable Media
T1092 - Communication Through Removable Media
T1102.002 - Bidirectional Communication

MITREへのリンク →

Turla

Score: 10.95

Matched TTPs:

T1025 - Data from Removable Media
T1587.001 - Malware
T1102.002 - Bidirectional Communication
T1584.004 - Server

MITREへのリンク →

Kimsuky

Score: 9.62

Matched TTPs:

T1587.001 - Malware
T1041 - Exfiltration Over C2 Channel
T1102.002 - Bidirectional Communication
T1588.003 - Code Signing Certificates

MITREへのリンク →

Indrik Spider

Score: 4.93

Matched TTPs:

T1587.001 - Malware
T1584.004 - Server

MITREへのリンク →

Lazarus Group

Score: 23.93

Matched TTPs:

T1587.001 - Malware
T1041 - Exfiltration Over C2 Channel
T1102.002 - Bidirectional Communication
T1584.004 - Server
T1027.007 - Dynamic API Resolution
T1561.001 - Disk Content Wipe
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
T1529 - System Shutdown/Reboot

MITREへのリンク →

Contagious Interview

Score: 6.81

Matched TTPs:

T1587.001 - Malware
T1041 - Exfiltration Over C2 Channel
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

MITREへのリンク →

LuminousMoth

Score: 7.10

Matched TTPs:

T1587.001 - Malware
T1091 - Replication Through Removable Media
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Sandworm Team

Score: 9.30

Matched TTPs:

T1587.001 - Malware
T1041 - Exfiltration Over C2 Channel
T1102.002 - Bidirectional Communication
T1584.004 - Server

MITREへのリンク →

Salt Typhoon

Score: 4.84

Matched TTPs:

T1587.001 - Malware
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

MITREへのリンク →

Aoqin Dragon

Score: 5.13

Matched TTPs:

T1587.001 - Malware
T1091 - Replication Through Removable Media

MITREへのリンク →

Ke3chang

Score: 4.07

Matched TTPs:

T1587.001 - Malware
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Mustang Panda

Score: 21.27

Matched TTPs:

T1587.001 - Malware
T1091 - Replication Through Removable Media
T1041 - Exfiltration Over C2 Channel
T1052.001 - Exfiltration over USB
T1588.003 - Code Signing Certificates
T1027.007 - Dynamic API Resolution
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

MITREへのリンク →

FIN7

Score: 7.53

Matched TTPs:

T1587.001 - Malware
T1091 - Replication Through Removable Media
T1102.002 - Bidirectional Communication

MITREへのリンク →

Darkhotel

Score: 3.03

Matched TTPs:

T1091 - Replication Through Removable Media

MITREへのリンク →

Tropic Trooper

Score: 7.17

Matched TTPs:

T1091 - Replication Through Removable Media
T1052.001 - Exfiltration over USB

MITREへのリンク →

Equation

Score: 8.67

Matched TTPs:

T1542.002 - Component Firmware
T1564.005 - Hidden File System

MITREへのリンク →

APT39

Score: 4.37

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1102.002 - Bidirectional Communication

MITREへのリンク →

APT32

Score: 4.72

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

MITREへのリンク →

ZIRCONIUM

Score: 4.37

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1102.002 - Bidirectional Communication

MITREへのリンク →

Wizard Spider

Score: 7.87

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1588.003 - Code Signing Certificates
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

MITREへのリンク →

Leviathan

Score: 4.81

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1584.004 - Server

MITREへのリンク →

MuddyWater

Score: 4.37

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1102.002 - Bidirectional Communication

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

BlackTech

Score: 3.15

Matched TTPs:

T1588.003 - Code Signing Certificates

MITREへのリンク →

FIN8

Score: 5.90

Matched TTPs:

T1588.003 - Code Signing Certificates
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol

MITREへのリンク →

Threat Group-3390

Score: 3.15

Matched TTPs:

T1588.003 - Code Signing Certificates

MITREへのリンク →

APT38

Score: 3.62

Matched TTPs:

T1529 - System Shutdown/Reboot

MITREへのリンク →

Medusa Group

Score: 3.62

Matched TTPs:

T1529 - System Shutdown/Reboot

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Lazarus Group

Score: 0.75

Matched TTPs:

T1529 - System Shutdown/Reboot
T1561.001 - Disk Content Wipe
T1587.001 - Malware
T1102.002 - Bidirectional Communication
T1584.004 - Server
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
T1027.007 - Dynamic API Resolution
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Mustang Panda

Score: 0.70

Matched TTPs:

T1052.001 - Exfiltration over USB
T1587.001 - Malware
T1588.003 - Code Signing Certificates
T1091 - Replication Through Removable Media
T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
T1027.007 - Dynamic API Resolution
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Gamaredon Group

Score: 0.64

Matched TTPs:

T1025 - Data from Removable Media
T1561.001 - Disk Content Wipe
T1001 - Data Obfuscation
T1102.002 - Bidirectional Communication
T1091 - Replication Through Removable Media
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る