IsSpace
Aliases: NfLog RAT
- Malware type
- rat
- Profile updated
- 2026-07-07 12:48:23
Targeted industries: government-and-public-sector defense-and-aerospace
Context
IsSpace, also known as NfLog RAT, is a remote access trojan used primarily for cyber espionage. It has been linked to campaigns targeting government and public sector organizations.
Detection coverage
- 1 YARA rules
Exploited vulnerabilities
- CVE-2015-5122 (vulnerability)
Detection rules
- MALPEDIA_Win_Isspace_Auto (yara-rule)
Reports & references
- secureworks.com — Bronze Overbrook (report)
- Palo Alto Unit 42 — Shallowtaurus (report)
- secureworks.com — Bronze Express (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Isspace (report)
- csecybsec.com — 20180713 Cse Apt28 X Agent Op Roman%20Holiday Report V6 1 (report)
- wikileaks.org — 2015 09 20150911 280 Csit 15085 Nflog (report)
- researchcenter.paloaltonetworks.com — Unit42 Dragonok Updates Toolset Targets Multiple Geographic Regions (report)
- Palo Alto Unit 42 — Watering Hole Attack On Aerospace Firm Exploits Cve 2015 5122 To Install Isspace Backdoor (report)