Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 14:42:32 UTC
Home > List all groups > List all tools > List all groups using tool USBWorm
 Tool: USBWorm
Names USBWorm
Category Malware
Type Backdoor, Exfiltration, Worm
Description
(Kaspersky) Based on our telemetry, USBWorm was used to infect thousands of victims, most
of them located in Afghanistan and India, providing the attacker with the ability to download
and execute arbitrary files, spread to removable devices and steal files of interest from infected
hosts even those disconnected from the internet.
Information Last change to this tool card: 01 May 2020
Download this tool card in JSON format
All groups using tool USBWorm
Changed Name Country Observed
APT groups
 Transparent Tribe, APT 36 2013-Mar 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=944d7316-205a-46d6-8cc8-3081b409800c
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=944d7316-205a-46d6-8cc8-3081b409800c
Page 1 of 1