Gamaredon Deploys LitterDrifter USB Worm in Cyber Espionage Operations

Threat Level – Amber | Vulnerability Report
Download PDF

Russian cyber espionage group Gamaredon (aka Primitive Bear) has been observed utilizing a USB-propagating worm known as LitterDrifter in attacks targeting Ukrainian entities. This group has recently adopted LitterDrifter, a worm written in VBS, designed to spread through removable USB drives and establish a command-and-control channel.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox