VPNFilter (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 12:47:12 UTC VPNFilter There is no description at this point. References 2024-04-16 ⋅ Mandiant ⋅ Alden Wahlstrom, Anton Prokopenkov, Dan Black, Dan Perez, Gabby Roncone, John Wolfram, Lexie Aytes, Nick Simonian, Ryan Hall, Tyler McLellan APT44: Unearthing Sandworm VPNFilter BlackEnergy CaddyWiper EternalPetya HermeticWiper Industroyer INDUSTROYER2 Olympic Destroyer PartyTicket RoarBAT Sandworm 2022-04-20 ⋅ CISA ⋅ Alert (AA22-110A): Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure VPNFilter BlackEnergy DanaBot DoppelDridex Emotet EternalPetya GoldMax Industroyer Sality SmokeLoader TrickBot Triton Zloader Killnet 2022-04-20 ⋅ CISA ⋅ Australian Cyber Security Centre (ACSC), Canadian Centre for Cyber Security (CCCS), CISA, FBI, Government Communications Security Bureau, National Crime Agency (NCA), NCSC UK, NSA AA22-110A Joint CSA: Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure VPNFilter BlackEnergy DanaBot DoppelDridex Emotet EternalPetya GoldMax Industroyer Sality SmokeLoader TrickBot Triton Zloader 2022-03-31 ⋅ Sentinel LABS ⋅ Juan Andrés Guerrero-Saade AcidRain | A Modem Wiper Rains Down on Europe AcidRain VPNFilter 2022-02-25 ⋅ CyberPeace Institute UKRAINE: Timeline of Cyberattacks VPNFilter EternalPetya HermeticWiper WhisperGate 2022-02-24 ⋅ Talos ⋅ Mitch Neff Threat Advisory: Current executive guidance for ongoing cyberattacks in Ukraine VPNFilter EternalPetya 2022-02-24 ⋅ Cisco Talos ⋅ Talos Threat Advisory: Cyclops Blink https://malpedia.caad.fkie.fraunhofer.de/details/elf.vpnfilter Page 1 of 3 VPNFilter 2022-02-24 ⋅ Tesorion ⋅ TESORION Report OSINT: Russia/ Ukraine Conflict Cyberaspect Mirai VPNFilter BlackEnergy EternalPetya HermeticWiper Industroyer WhisperGate 2022-02-23 ⋅ CISA, FBI, NCSC UK, NSA Advisory: New Sandworm malware Cyclops Blink replaces VPNFilter VPNFilter 2022-02-23 ⋅ CISA ⋅ CISA Alert (AA22-054A) New Sandworm Malware Cyclops Blink Replaces VPNFilter CyclopsBlink VPNFilter 2022-02-23 ⋅ NCSC UK ⋅ NCSC UK New Sandworm malware Cyclops Blink replaces VPNFilter VPNFilter 2021-09-30 ⋅ lacework ⋅ Lacework Labs Mirai goes Stealth – TLS & IoT Malware Mirai VPNFilter 2021-01-19 ⋅ Trend Micro ⋅ Fernando Mercês, Stephen Hilt VPNFilter Two Years Later: Routers Still Compromised VPNFilter 2020-10-19 ⋅ UK Government ⋅ Dominic Raab, ForeignCommonwealth & Development Office UK exposes series of Russian cyber attacks against Olympic and Paralympic Games VPNFilter BlackEnergy EternalPetya Industroyer 2020-02-13 ⋅ Qianxin ⋅ Qi Anxin Threat Intelligence Center APT Report 2019 Chrysaor Exodus Dacls VPNFilter DNSRat Griffon KopiLuwak More_eggs SQLRat AppleJeus BONDUPDATER Agent.BTZ Anchor AndroMut AppleJeus BOOSTWRITE Brambul Carbanak Cobalt Strike Dacls DistTrack DNSpionage Dtrack ELECTRICFISH FlawedAmmyy FlawedGrace Get2 Grateful POS HOPLIGHT Imminent Monitor RAT jason Joanap KerrDown KEYMARBLE Lambert LightNeuron LoJax MiniDuke PolyglotDuke PowerRatankba Rising Sun SDBbot ServHelper Snatch Stuxnet TinyMet tRat TrickBot Volgmer X-Agent Zebrocy 2019-08-08 ⋅ BlackHat ⋅ Eric Doerr The Enemy Within: Modern Supply Chain Attacks VPNFilter 2019-08-05 ⋅ Microsoft ⋅ MSRC Team Corporate IoT – a path to intrusion (APT28/STRONTIUM) VPNFilter https://malpedia.caad.fkie.fraunhofer.de/details/elf.vpnfilter Page 2 of 3 2019-05-23 ⋅ Cisco Talos ⋅ Martin Lee One year later: The VPNFilter catastrophe that wasn't VPNFilter 2018-09-26 ⋅ Cisco ⋅ Edmund Brumaghin VPNFilter III: More Tools for the Swiss Army Knife of Malware VPNFilter 2018-07-13 ⋅ Trend Micro ⋅ Peter Lee, Tony Yang VPNFilter-affected Devices Still Riddled with 19 Vulnerabilities VPNFilter 2018-06-06 ⋅ Cisco Talos ⋅ William Largent VPNFilter Update - VPNFilter exploits endpoints, targets new devices VPNFilter 2018-05-24 ⋅ Kaspersky Labs ⋅ GReAT VPNFilter EXIF to C2 mechanism analysed VPNFilter 2018-05-23 ⋅ Symantec ⋅ Symantec Security Response Team VPNFilter: New Router Malware with Destructive Capabilities VPNFilter 2018-05-23 ⋅ Cisco Talos ⋅ Cisco Talos New VPNFilter malware targets at least 500K networking devices worldwide VPNFilter 2018-05-23 ⋅ Department of Justice ⋅ Office of Public Affairs Justice Department Announces Actions to Disrupt Advanced Persistent Threat 28 Botnet of Infected Routers and Network Storage Devices VPNFilter APT28 2018-05-01 ⋅ Sophos ⋅ Sergei Shevchenko VPNFilter Botnet - a SophosLabs Analysis VPNFilter There is no Yara-Signature yet. Source: https://malpedia.caad.fkie.fraunhofer.de/details/elf.vpnfilter https://malpedia.caad.fkie.fraunhofer.de/details/elf.vpnfilter Page 3 of 3