MoonWalk
Aliases: CurveLast, SneakCross
- First seen
- 2016-11-20 00:00:00
- Malware type
- rat, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 15:12:29
Targeted industries: government-and-public-sector financial-services technology-and-telecommunications
Context
MoonWalk is a remote access trojan aimed at gaining unauthorized access to sensitive systems, primarily targeting government, financial services and tech sectors. It is known for its stealthy features and ability to exfiltrate data without being detected.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Moonwalk_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Moonwalk (report)
- zscaler.com — Moonwalk Deep Dive Updated Arsenal Apt41 Part 2 (report)