Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:52:25 UTC
Home > List all groups > List all tools > List all groups using tool Coyote
 Tool: Coyote
Names Coyote
Category Malware
Type Banking trojan
Description
(Kaspersky) This malware utilizes the Squirrel installer for distribution, leveraging NodeJS
and a relatively new multiplatform programming language called Nim as a loader to complete
its infection. We have named this newly discovered Trojan “Coyote” due to the role of coyotes
as natural predators of squirrels. The Nim language defines itself as a “statically typed
compiled systems programming language that combines successful concepts from mature
languages like Python, Ada and Modula”.
Information
Last change to this tool card: 22 February 2025
Download this tool card in JSON format
All groups using tool Coyote
Changed Name Country Observed
Unknown groups
 _[ Interesting malware not linked to an actor yet ]_
1 group listed (0 APT, 0 other, 1 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2b0445c9-c81d-40de-be7b-5df2084df059
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2b0445c9-c81d-40de-be7b-5df2084df059
Page 1 of 1