TOUGHPROGRESS
Aliases: Calendarwalk
- First seen
- 2020-05-01 00:00:00
- Malware type
- backdoor, rat
- Family
- Malware family
- Profile updated
- 2026-07-07 15:23:21
Targeted industries: technology-and-telecommunications financial-services government-and-public-sector
Context
According to Google Threat Intelligence Group, this malware uses Google Calendar events for command and control (C2).
Detection coverage
- 1 YARA rules
Used by threat actors
- TOUGHPROGRESS Campaign (campaign)
Detection rules
- MALPEDIA_Win_Toughprogress_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Toughprogress (report)
- virusbulletin.com — Google Calendar As C2 Infrastructure A China Nexus Campaign With Stealthy Tactics (report)
- cloud.google.com — Apt41 Innovative Tactics (report)