FireWood
- First seen
- 2019-07-01 00:00:00
- Malware type
- trojan, backdoor
- Family
- Malware family
- Last IoC activity
- 2026-06-25 09:55:40
- Profile updated
- 2026-07-07 14:24:52
Targeted industries: government-and-public-sector energy-and-utilities
Context
FireWood is a sophisticated malware family primarily used for cyber espionage. It has been known to target government and public sector organizations, as well as the energy and utilities industries, leveraging trojan and backdoor functionalities.
Detection coverage
- 1 YARA rules
Detection rules
- SEKOIA_Apt_Gelsemium_Firewood_Backdoor (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Firewood (report)
- intezer.com — Threat Bulletin Firewood (report)
- ESET — Unveiling Wolfsbane Gelsemiums Linux Counterpart To Gelsevirine (report)