SunSeed
- First seen
- 2022-03-01 00:00:00
- Malware type
- trojan
- Profile updated
- 2026-07-07 15:21:44
Targeted industries: government-and-public-sector transportation-and-logistics
Targeted regions: country_code:ua country_code:pl
Context
According to Proofpoint, this is a Lua-based malware likely used by a nation-state sponsored attacker used to target European government personnel involved in managing the logistics of refugees fleeing Ukraine.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Sunseed (report)
- proofpoint.com — Asylum Ambuscade State Actor Uses Compromised Private Ukrainian Military Emails (report)
- blogs.blackberry.com — Threat Thursday Sunseed Malware (report)