providence

First seen
2021-04-15 00:00:00
Malware type
rat, backdoor
Family
Malware family
Profile updated
2026-07-07 13:55:00

Targeted industries: government-and-public-sector energy-and-utilities financial-services

Targeted regions: country_code:us country_code:ru country_code:cn

Context

Providence is a sophisticated remote access tool (RAT) observed in attacks against government and critical infrastructure sectors. It enables remote control and data exfiltration, often used in cyber espionage campaigns.

Reports & references

  • ransomlook.io — Providence (report)

External references