Subzero
Aliases: Corelump, Jumplump
- First seen
- 2022-07-01 00:00:00
- Malware type
- trojan, spyware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:11:18
Targeted industries: financial-services government-and-public-sector
Targeted regions: country_code:us country_code:de
Context
Subzero is a sophisticated malware family identified for its espionage capabilities, often used to gather sensitive information. It primarily targets financial services and government entities, aiming to exfiltrate data and establish persistent access.
Reports & references
- socradar.io — Threats Of Commercialized Malware Knotweed (report)
- Microsoft — Untangling Knotweed European Private Sector Offensive Actor Using 0 Day Exploits (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Subzero (report)
- focus.de — Vorab Aus Dem Focus Volle Kontrolle Ueber Zielcomputer Das Raetsel Um Die Spionage App Fuehrt Ueber Wirecard Zu Putin Id 24442733 (report)
- cdn.netzpolitik.org — 2018 08 28 Dsirf Company Profile Gov.Redacted (report)
- netzpolitik.org — Dsirf Wir Enthuellen Den Staatstrojaner Subzero Aus Oesterreich (report)