Home > List all groups > List all tools > List all groups using tool RustDown

Threat Group Cards: A Threat Actor Encyclopedia

Names	RustDown
Category	Malware
Type	Backdoor
Description	(Intezer) In October 2023, we discovered a new malware written in Rust. The sample is a 32-bit Windows executable masquerading as a PHP framework component. While the codebase is new, the malware consistently shares TTPs used by the WildCard threat actor in both SysJoker and its variants. The name of the malware is derived from the developers, as evidenced by a leftover PDB path.
Information	<https://intezer.com/blog/research/wildcard-evolution-of-sysjoker-cyber-threat/>

Last change to this tool card: 30 November 2023

Download this tool card in JSON format

Previous: RustDesk
Next: Ryuk

1 group listed (1 APT, 0 other, 0 unknown)

APT groups