MOUSEISLAND
- Malware type
- downloader, loader
- Family
- Malware family
- Profile updated
- 2026-07-07 13:45:48
Targeted industries: financial-services technology-and-telecommunications
Targeted regions: country_code:us country_code:gb
Context
MOUSEISLAND is a Microsoft Word macro downloader used as the first infection stage and is delivered inside a password-protected zip attached to a phishing email. Based on Fireeye intrusion data from responding to ICEDID related incidents, the secondary payload delivered by MOUSEISLAND has been PHOTOLOADER, which acts as an intermediary downloader to install ICEDID.
Reports & references
- Mandiant — Melting Unc2198 Icedid To Ransomware Operations (report)
- malpedia.caad.fkie.fraunhofer.de — Vbs.Mouseisland (report)