GrimPlant (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-06 03:10:55 UTC
This malware was seen during the cyberattacks on Ukrainian state organizations. It is one of two used backdoors
written in Go and attributed to UAC-0056 (SaintBear, UNC2589, TA471).
[TLP:WHITE] win_grimplant_auto (20251219 | Detects win.grimplant.)
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.grimplant
https://malpedia.caad.fkie.fraunhofer.de/details/win.grimplant
Page 1 of 1