Guard
- First seen
- 2020-03-18 00:00:00
- Malware type
- trojan
- Profile updated
- 2026-07-07 13:10:26
Targeted industries: energy-and-utilities
Context
According to Kaspersky Labs, Guard is a malware developed by threat actor WildPressure. It is written in Python and packaged using PyInstaller, both for Windows and macOS operating systems. Its intrinsics resemble parts of how win.milum operates.
Used by threat actors
- Iranian IRGC Data Extortion Operations (campaign)
Reports & references
- Kaspersky — 103072 (report)
- malpedia.caad.fkie.fraunhofer.de — Py.Guard (report)