TunnelSpecter

First seen
2021-04-15 00:00:00
Malware type
rat, spyware
Profile updated
2026-07-07 13:09:52

Targeted industries: government-and-public-sector energy-and-utilities technology-and-telecommunications

Targeted regions: country_code:us country_code:cn country_code:ru

Context

TunnelSpecter is a Remote Access Trojan (RAT) used primarily in cyber-espionage campaigns targeting critical infrastructure and governmental entities. It has capabilities for data exfiltration and surveillance.

Reports & references

  • Palo Alto Unit 42 — Operation Diplomatic Specter (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Tunnelspecter (report)

External references