SiestaGraph

Aliases: DRAFTGRAPH

First seen
2019-04-15 00:00:00
Malware type
rat
Family
Malware family
Profile updated
2026-07-07 13:07:18

Targeted industries: government-and-public-sector

Context

SiestaGraph, also known as DRAFTGRAPH, is a remote access trojan (RAT) used in cyber espionage campaigns, primarily targeting government and public sector organizations. It is part of a sophisticated attack framework associated with advanced persistent threats (APTs).

Reports & references

  • elastic.co — Ref2924 Howto Maintain Persistence As An Advanced Threat (report)
  • virusbulletin.com — Down The Grayrabbit Hole Exposing Unc3569 And Its Modus Operandi (report)
  • elastic.co — Siestagraph New Implant Uncovered In Asean Member Foreign Ministry (report)
  • elastic.co — Update To The Ref2924 Intrusion Set And Related Campaigns (report)
  • elastic.co — Naplistener More Bad Dreams From The Developers Of Siestagraph (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Siesta Graph (report)
  • x.com — 1701259256199090217 (report)

External references