tsunami
- Malware type
- backdoor, rat
- Family
- Malware family
- Last IoC activity
- 2026-07-22 02:38:27
- Profile updated
- 2026-07-07 14:32:37
Context
Tsunami is an open-source malware primarily used as a backdoor and remote access tool (RAT) on Linux systems. It is capable of providing attackers remote control over infected devices for various malicious activities.
Reports & references
- doi.org — Arxiv.2505.21725 (report)
- bitdefender.com — Lazarus Group Targets Organizations With Sophisticated Linkedin Recruiting Scam (report)
- research.hisolutions.com — Rolling In The Deepweb Lazarus Tsunami (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Tsunami (report)
- linkedin.com — Alessio Di Santo 712348197 Iocs Ttps Lazarusgroup Activity 7263976334807220224 N6Ue (report)