XFSADM
- First seen
- 2021-02-15 00:00:00
- Malware type
- rat
- Family
- Malware family
- Profile updated
- 2026-07-07 15:26:55
Targeted industries: financial-services government-and-public-sector technology-and-telecommunications
Context
XFSADM is a remote access tool (RAT) primarily used for espionage and data exfiltration. It targets sensitive industries such as financial services, government, and telecommunications to gain unauthorized access to confidential information.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Xfsadm_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Xfsadm (report)
- twitter.com — 1149454961740255232 (report)
- twitter.com — 1149043362244308992 (report)