MosaicRegressor
- First seen
- 2020-10-06 00:00:00
- Malware type
- backdoor
- Family
- Malware family
- Profile updated
- 2026-07-07 15:10:02
Targeted industries: government-and-public-sector technology-and-telecommunications
Targeted regions: country_code:ru
Context
MosaicRegressor is a modular malware framework used by threat actors to persist on UEFI firmware. It primarily targets government entities and technology firms with a focus on espionage.
Reports & references
- blogs.vmware.com — Detecting Uefi Bootkits In The Wild Part 1 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Mosaic Regressor (report)
- Kaspersky — 98849 (report)