Trusted Design

Poison Ivy RAT Variant Targets Hong Kong Pro-Democracy Activists

概要

Malware writers have always sought to develop feature-rich, easy to use tools that are also somewhat hard to detect via both host- and network-based detection systems. For many years, one of the go-to families of malware used by both less-skilled and advanced actors has been the Poison Ivy (aka PIVY) RAT. Poison Ivy has a convenient graphical user interface (GUI) for managing compromised hosts and provides easy access to a rich suite of post-compromise tools. It is no surprise it’s now being used against pro-democracy organizations and supporters in Hong Kong that have long been a target of advanced attack campaigns.

Created: 2026-02-23

Indicators

• CVE - CVE-2015-2545 -
• hostname - sent.leeh0m.org -
• hostname - found.leeh0m.org -
• FileHash-SHA256 - 0414bd2186d9748d129f66ff16e2c15df41bf173dc8e3c9cbd450571c99b3403 -
• FileHash-SHA256 - 4d38d4ee5b625e09b61a253a52eb29fcf9c506ee9329b3a90a0b3911e59174f2 -
• FileHash-SHA256 - 9c6dc1c2ea5b2370b58b0ac11fde8287cd49aee3e089dbdf589cc8d51c1f7a9e -
• FileHash-SHA256 - 13bdc52c2066e4b02bae5cc42bc9ec7dfcc1f19fbf35007aea93e9d62e3e3fd0 -
• FileHash-SHA256 - c707716afde80a41ce6eb7d6d93da2ea5ce00aa9e36944c20657d062330e13d8 -

類似Pulses

• Poison Ivy Activity Targeting Myanmar, Asian Countries (score: 0.75)
• Taiwan targeted with new cyberespionage backdoor Trojan (score: 0.61)
• RATs from the Underground (score: 0.61)
• ELISE: Security Through Obesity (score: 0.60)
• Spam Campaign Distributes AdWind RAT (score: 0.60)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る