Barb(ie) Downloader - Threat Group Cards: A Threat Actor
Encyclopedia
Archived: 2026-04-05 17:01:47 UTC
Home > List all groups > List all tools > List all groups using tool Barb(ie) Downloader
 Tool: Barb(ie) Downloader
Names Barb(ie) Downloader
Category Malware
Type Downloader
Description
(Cybereason) Barb(ie) is a downloader component used by APT-C-23 to install the BarbWire
backdoor. As mentioned above, in the infection phase the downloader is delivered alongside a
video in a .rar file. The video is meant to distract the victim from the infection process that is
happening in the background.
Information
<https://www.cybereason.com/blog/operation-bearded-barbie-apt-c-23-campaign-targeting-israeli-officials>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.barbie>
Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool Barb(ie) Downloader
Changed Name Country Observed
APT groups
  Desert Falcons [Gaza] 2011-Oct 2023
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2e92bd30-3e78-43a3-9cb3-74f987bc3ef0
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=2e92bd30-3e78-43a3-9cb3-74f987bc3ef0
Page 1 of 1