ProjectWood
- Malware type
- backdoor, loader
- Last IoC activity
- 2026-07-16 17:56:14
- Profile updated
- 2026-07-07 13:00:08
Targeted industries: defense-and-aerospace government-and-public-sector
Targeted regions: country_code:us country_code:ru country_code:cn
Context
ProjectWood is a sophisticated cyber-espionage malware known for targeting government and military entities. It often serves as a backdoor and loader in targeted attacks, facilitating further payload deployments.
Reports & references
- public.gdatasoftware.com — Gdata Toohash Casestudy 102014 En V1 (report)
- ESET — Nspx30 Sophisticated Aitm Enabled Implant Evolving Since 2005 (report)
- jsac.jpcert.or.jp — Jsac2024 1 2 Facundo En (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Project Wood (report)
- sans.org — 33814 (report)