Alma Communicator
- First seen
- 2022-07-15 00:00:00
- Malware type
- rat
- Profile updated
- 2026-07-07 14:38:27
Targeted industries: government-and-public-sector energy-and-utilities financial-services
Targeted regions: country_code:us country_code:ru country_code:cn
Context
Alma Communicator is a remote access tool designed for espionage purposes, primarily targeting government, financial, and energy sectors across various countries, including the US, Russia, and China. The tool is known for enabling command and control operations and facilitating unauthorized access to sensitive information.
Reports & references
- Palo Alto Unit 42 — Dns Tunneling In The Wild Overview Of Oilrigs Dns Tunneling (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Alma Communicator (report)
- researchcenter.paloaltonetworks.com — Unit42 Oilrig Deploys Alma Communicator Dns Tunneling Trojan (report)