Auriga
Aliases: Riodrv
- First seen
- 2019-11-01 00:00:00
- Malware type
- rootkit
- Family
- Malware family
- Profile updated
- 2026-07-07 14:46:25
Targeted industries: defense-and-aerospace government-and-public-sector
Context
Auriga, also known as Riodrv, is a malware family primarily used for establishing persistent access and control on infected machines. It is typically associated with operations targeting government and public sector entities.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Auriga_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Auriga (report)
- github.com — Appendix%20C%20(Digital)%20 %20The%20Malware%20Arsenal (report)