FunnySwitch
Aliases: RouterGod
- First seen
- 2023-02-15 00:00:00
- Malware type
- backdoor, rat
- Family
- Malware family
- Profile updated
- 2026-07-07 13:01:58
Targeted industries: technology-and-telecommunications government-and-public-sector
Targeted regions: country_code:us country_code:ru country_code:cn
Context
FunnySwitch, also known as RouterGod, is a remote access tool that targets network devices, primarily in the telecommunications and government sectors. Its primary functionality is to provide attackers with persistent access by exploiting vulnerabilities in routers and switches.
Reports & references
- i.blackhat.com — As 22 Leonsilvia Nextgenplugxshadowpad (report)
- Trend Micro — Technical Brief Delving Deep An Analysis Of Earth Lusca Operations (report)
- go.recordedfuture.com — Cta 2023 0808 (report)
- ptsecurity.com — Higaisa Or Winnti Apt 41 Backdoors Old And New (report)
- speakerdeck.com — Winnti Is Coming Evolution After Prosecution At Hitcon2021 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Funnyswitch (report)