Space Pirates — APT Profile
Space Pirates is a Chinese APT targeting aviation, aerospace, and energy organizations in Russia and Asia.Also tracked as
Webworm, Erudite Mogwai
Tools & malware
- 9002 RAT RAT
- BH_A006 Backdoor
- CopyCat Stealer
- Deed RAT RAT
- Downloader.Climax.A Loader
- Downloader.Climax.B Loader
- Gh0st RAT RAT
- LuckyStrike Agent Backdoor
- MyKLoadClient Loader
- PlugX Backdoor
- Poison Ivy RAT
- ReVBShell Webshell
- RtlShare Backdoor
- ShadowPad Backdoor
- Stowaway Tool
- Trochilus RAT RAT
- Voidoor Backdoor
- Zupdax Backdoor
Vendor research
- Space Pirates: analyzing the tools and connections of a new hacker group Positive Technologies
- Space Pirates: a look into the group's unconventional techniques, new attack vectors, and tools Positive Technologies
- Webworm: Espionage Attackers Testing and Using Older Modified RATs Symantec
- Erudite Mogwai использует кастомный Stowaway для скрытного продвижения в сети Solar (4RAYS)