BABYMETAL
- Malware type
- rat
- Family
- Malware family
- Profile updated
- 2026-07-07 12:45:22
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
BABYMETAL is a command line network tunnel utility based on the TinyMet Meterpreter tool, primarily used to execute Meterpreter reverse shell payloads.
Reports & references
- Mandiant — Fin7 Pursuing An Enigmatic And Evasive Global Criminal Operation (report)
- Mandiant — Evolution Of Fin7 (report)
- cert.ssi.gouv.fr — 20220427 Np Tlpwhite Anssi Fin7 (report)
- Mandiant — Cds18 Technical S05 Att&Cking Fin7 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Babymetal (report)
- infosecurityeurope.com — 367989 (report)