FunnySwitch
Aliases: RouterGod
- First seen
- 2023-02-15 00:00:00
- Malware type
- backdoor, rat
- Family
- Malware family
- Profile updated
- 2026-07-07 13:01:58
Targeted industries: technology-and-telecommunications government-and-public-sector
Targeted regions: country_code:us country_code:ru country_code:cn
Context
FunnySwitch, also known as RouterGod, is a remote access tool that targets network devices, primarily in the telecommunications and government sectors. Its primary functionality is to provide attackers with persistent access by exploiting vulnerabilities in routers and switches.
Reports & references
- Trend Micro — Technical Brief Delving Deep An Analysis Of Earth Lusca Operations (report)
- go.recordedfuture.com — Cta 2023 0808 (report)
- i.blackhat.com — As 22 Leonsilvia Nextgenplugxshadowpad (report)
- ptsecurity.com — Higaisa Or Winnti Apt 41 Backdoors Old And New (report)
- speakerdeck.com — Winnti Is Coming Evolution After Prosecution At Hitcon2021 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Funnyswitch (report)