
| Names | NETWoolger | |
| Category | Malware | |
| Type | Keylogger | |
| Description | (Check Point) a .NET based ‘woolen key-logger.’ This malware is functionally similar to CWoolger. The attackers seem to use them interchangeably, as alternate infection mechanisms (in case one is detected at the victim computer). | |
| Information | <https://blog.checkpoint.com/wp-content/uploads/2015/11/rocket-kitten-report.pdf> | |
Last change to this tool card: 08 May 2020
Download this tool card in JSON format
| Changed | Name | Country | Observed | ||
APT groups | |||||
| Magic Hound, APT 35, Cobalt Illusion, Charming Kitten | 2012-Jun 2025 | ![]() | |||
1 group listed (1 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||