Milum
- First seen
- 2019-08-01 00:00:00
- Malware type
- rat
- Profile updated
- 2026-07-07 13:10:27
Targeted industries: energy-and-utilities
Targeted regions: country_code:sa
Context
In August 2019, Kaspersky Labs discovered a malware they dubbed Milum (naming based on internal file name fragments) when investigating an operation they named WildPressure. It is written in C++ using STL, primarily to parse JSON. Functionality includes bidirectional file transmission and remote command execution.
Detection coverage
- 3 YARA rules
Detection rules
- TRELLIX_ARC_Milum_Trojan (yara-rule)
- ARKBIRD_SOLG_MAL_Milum_Jul_2021_1 (yara-rule)
- MALPEDIA_Win_Milum_Auto (yara-rule)
Reports & references
- Kaspersky — 103072 (report)
- Kaspersky — 96360 (report)
- ics-cert.kaspersky.com — Kaspersky H1 2020 Ics Report En (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Milum (report)