Unidentified VBS 005 (Telegram Loader)

Malware type
loader
Profile updated
2026-07-07 14:41:45

Targeted industries: financial-services government-and-public-sector technology-and-telecommunications

Context

Unidentified VBS 005 is a VBS-based loader that uses Telegram as a communication channel. It is used to deliver additional malicious payloads to the victim's system.

Reports & references

  • threatmon.io — Beyond Bullets And Bombs An Examination Of Armageddon Groups Cyber Warfare Against Ukraine (report)
  • malpedia.caad.fkie.fraunhofer.de — Vbs.Unidentified 005 (report)
  • Palo Alto Unit 42 — Trident Ursa (report)

External references