Trusted Design

A deeper look at Tofsee modules - CERT Polska

概要

Tofsee is a multi-purpose malware with wide array of capabilities – it can mine bitcoins, send emails, steal credentials, perform DDoS attacks, and more. All of this is possible because of its modular nature. We have already published about Tofsee/Gheg a few months ago – https://www.cert.pl/en/news/single/tofsee-en. Reading or at least skimming it is probably required to fully understand this post. Note that it is meant as an extension of that research, focusing on plugin functionality that we previously ignored. We will shortly summarize each plugin and highlight its most important features.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• A deeper look at Tofsee modules (score: 0.79)
• Tofsee (score: 0.77)
• Tofsee – modular spambot (score: 0.67)
• CozyDuke F-Secure report (score: 0.53)
• BBSRAT Attacks Targeting Russian Organizations (score: 0.53)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る