Winnti (OS X)

First seen
2015-10-01 00:00:00
Malware type
backdoor
Family
Malware family
Profile updated
2026-07-07 14:37:58

Targeted industries: government-and-public-sector technology-and-telecommunications

Targeted regions: country_code:cn country_code:us country_code:de

Context

Winnti (OS X) is a variant of the Winnti malware family, primarily known for targeting government and technology sectors in multiple countries. It functions as a backdoor, allowing threat actors to conduct espionage and persistent access operations.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Osx.Winnti (report)
  • 401trg.pw — Winnti Evolution Going Open Source (report)

External references