Unidentified ELF 004

Malware type
trojan, backdoor
Profile updated
2026-07-07 14:29:17

Targeted industries: government-and-public-sector technology-and-telecommunications

Context

Implant used by APT31 on compromised SOHO infrastructure, tries to camouflage as a tool ("unifi-video") related to Ubiquiti UniFi surveillance cameras.

Reports & references

  • sekoia.io — Walking On Apt31 Infrastructure Footprints (report)
  • malpedia.caad.fkie.fraunhofer.de — Elf.Unidentified 004 (report)

External references