VEILEDSIGNAL
- First seen
- 2021-06-15 00:00:00
- Malware type
- backdoor, rat
- Family
- Malware family
- Profile updated
- 2026-07-07 15:25:19
Targeted industries: government-and-public-sector defense-and-aerospace
Targeted regions: country_code:us country_code:uk
Context
VEILEDSIGNAL is a sophisticated remote access tool (RAT) primarily targeting government and defense sectors in the US and UK. It is known for its stealth capabilities and advanced persistence tactics to evade detection.
Detection coverage
- 12 YARA rules
Detection rules
- MALPEDIA_Win_Veiledsignal_Auto (yara-rule)
- SIGNATURE_BASE_APT_MAL_VEILEDSIGNAL_Backdoor_Apr23 (yara-rule)
- SIGNATURE_BASE_SUSP_APT_MAL_VEILEDSIGNAL_Backdoor_Apr23 (yara-rule)
- SIGNATURE_BASE_APT_NK_MAL_M_Hunting_VEILEDSIGNAL_1 (yara-rule)
- SIGNATURE_BASE_APT_NK_MAL_M_Hunting_VEILEDSIGNAL_2 (yara-rule)
- SIGNATURE_BASE_APT_NK_MAL_M_Hunting_VEILEDSIGNAL_3 (yara-rule)
- SIGNATURE_BASE_APT_NK_MAL_M_Hunting_VEILEDSIGNAL_4 (yara-rule)
- SIGNATURE_BASE_APT_NK_MAL_M_Hunting_VEILEDSIGNAL_5 (yara-rule)
- SIGNATURE_BASE_APT_NK_MAL_M_Hunting_VEILEDSIGNAL_6 (yara-rule)
- SIGNATURE_BASE_APT_MAL_VEILEDSIGNAL_Backdoor_Apr23_2 (yara-rule)
- SIGNATURE_BASE_APT_MAL_VEILEDSIGNAL_Backdoor_Apr23_3 (yara-rule)
- SIGNATURE_BASE_APT_MAL_VEILEDSIGNAL_Backdoor_Apr23_4 (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Veiledsignal (report)
- Broadcom/Symantec — Xtrader 3Cx Supply Chain (report)