NorthStar

Malware type
rat
Profile updated
2026-07-07 13:06:54

Context

An open source C2 framework intended for pentest and red teaming activities.

Detection coverage

  • 1 YARA rules

Detection rules

  • SEKOIA_Backdoor_Opensource_Northstar_Strings (yara-rule)

Reports & references

  • Mandiant — Suspected Iranian Actor Targeting Israeli Shipping (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Northstar (report)

External references