Names | RomeoDelta DeltaNC | |
Category | Malware | |
Type | Backdoor, Tunneling | |
Description | (Novetta) RomeoDelta is a RAT dropped by IndiaFoxtrot alongside DeltaBravo. In addition to being dropped alongside DeltaBravo, RomeoDelta contains a significant amount of code and artifact overlap with DeltaCharlie, indicating a shared development environment, if not a shared developer(s). | |
Information | <https://www.operationblockbuster.com/wp-content/uploads/2016/02/Operation-Blockbuster-RAT-and-Staging-Report.pdf> |
Last change to this tool card: 20 April 2020
Download this tool card in JSON format
Changed | Name | Country | Observed | ||
APT groups | |||||
Lazarus Group, Hidden Cobra, Labyrinth Chollima | 2007-Sep 2024 |
1 group listed (1 APT, 0 other, 0 unknown)
Digital Service Security Center Follow us on |
Report incidents |
|
+66 (0)2-123-1227 | ||
[email protected] |