TetrisPhantom

Primary motivation
espionage
Sophistication
advanced
Resource level
government
Actor type
nation-state
Profile updated
2026-07-07 12:05:18

Targeted industries: government-and-public-sector

Context

TetrisPhantom relies on compromising of certain type of secure USB drives that provide hardware encryption and is commonly used by government organizations. While investigating this threat, experts identified an entire spying campaign that uses a range of malicious modules to execute commands, collect files and information from compromised computers and transfer them to other machines also using secure USB drives.

Reports & references

  • usa.kaspersky.com — 29254 (report)
  • Kaspersky — 110752 (report)

External references