TUNNELFISH

Malware type
rat, backdoor
Family
Malware family
Profile updated
2026-07-07 15:23:36

Targeted industries: government-and-public-sector defense-and-aerospace

Context

TUNNELFISH is a remote access Trojan primarily used in targeted cyber espionage campaigns. It is known to provide attackers with persistent access to compromised networks, often within government and defense sectors.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Tunnelfish (report)
  • secureworks.com — Opsec Mistakes Reveal Cobalt Mirage Threat Actors (report)

External references