Roaming Tiger
Also reported as Rotten Tomato, BRONZE WOODLAND, CTG-7273 and Bronze Woodland. Linked to China by one source.
Reports per quarter
CVEs named in reports
- CVE-2012-0158 KEV ransomware
- CVE-2013-3893 KEV
- CVE-2014-1761 KEV
- CVE-2017-11882 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Zeus (Malware Family)
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Shadows in the Rain
-
Into the Fog - The Return of ICEFOG APT
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Into the Fog - The Return of ICEFOG APT
-
Into the Fog - The Return of ICEFOG APT
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Into the Fog - The Return of ICEFOG APT
-
BBSRAT Attacks Targeting Russian Organizations Linked to Roaming Tiger
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor BBSRAT Attacks Targeting Russian Organizations Linked to Roaming Tiger
-
Digital Quartermaster Scenario Demonstrated in Attacks Against the Mongolian Government
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Digital Quartermaster Scenario Demonstrated in Attacks Against the Mongolian Government
Show all 18 reports Show fewer
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor BBSRAT Attacks Targeting Russian Organizations Linked to Roaming Tiger - Palo Alto Networks BlogPalo Alto Networks Blog
-
BBSRAT Attacks Targeting Russian Organizations Linked to Roaming Tiger
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor BBSRAT Attacks Targeting Russian Organizations Linked to Roaming Tiger
-
Plugx Goes To The Registry (And India)
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Plugx Goes To The Registry (And India)
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Roaming Tiger
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The Rotten Tomato Campaign
Newest first. Details opens the report in Explore.