RustBucket (Windows)

First seen
2023-04-12 00:00:00
Malware type
rat
Family
Malware family
Profile updated
2026-07-07 14:37:42

Targeted industries: government-and-public-sector financial-services

Targeted regions: country_code:us country_code:gb

Context

RustBucket is a Remote Access Trojan (RAT) targeting Windows systems, primarily aimed at compromising governmental and financial institutions. Its functionalities include data exfiltration and system control, often associated with cyber espionage campaigns.

Reports & references

  • sansorg.egnyte.com — 3P3Hxfingl (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Rustbucket (report)
  • blog.sekoia.io — Bluenoroffs Rustbucket Campaign (report)

External references