Names | MASOL RAT Backdr-NQ | |
Category | Malware | |
Type | Backdoor | |
Description | (Trend Micro) We discovered that Earth Estries uses another cross-platform backdoor, which we initially identified during our investigation of Southeast Asian government incidents in 2020. We named it MASOL RAT based on its PDB string. We couldn’t link MASOL RAT to any known threat group at the time due to limited information. However, this year we observed that Earth Estries has been deploying MASOL RAT on Linux devices targeting Southeast Asian government networks. | |
Information | <https://www.trendmicro.com/en_us/research/24/k/earth-estries.html> |
Last change to this tool card: 28 December 2024
Download this tool card in JSON format
Changed | Name | Country | Observed | ||
APT groups | |||||
Salt Typhoon, GhostEmperor | 2020-Dec 2024 |
1 group listed (1 APT, 0 other, 0 unknown)
Digital Service Security Center Follow us on |
Report incidents |
|
+66 (0)2-123-1227 | ||
[email protected] |