Malware
BadPaw
- First Reported
- Mar 5, 2026
- Latest Reported
- Mar 5, 2026
Reported Context (4)
- The operation, named BadPaw, uses tracking redirects, Windows install-age sandbox checks, steganography-backed persistence, and staged C2 downloads that deploy the MeowMeowProgram backdoor. ClearSky Details BadPaw Malware Campaign Targeting Ukraine
- Researchers disclosed a Russian-linked campaign targeting Ukrainian entities that uses phishing emails and HTA lures to deploy two previously undocumented malware families, BadPaw and MeowMeow. ClearSky Moderately Attributes BadPaw and MeowMeow Campaign Targeting Ukraine to APT28
- ClearSky Team uncovered a targeted Russian state-aligned campaign against Ukraine that uses border-crossing appeals to deliver two novel malware strains, BadPaw and MeowMeow. ClearSky Reports Russian-Aligned BadPaw and MeowMeow Campaign Targeting Ukraine
- containing a ZIP archive and a malicious Ukrainian-language document, which triggers a loader called BadPaw and installs a backdoor named MeowMeow. ClearSky Reports Suspected Russian Espionage Campaign Using BadPaw and MeowMeow
Malware (4)
Threat Actors (4)
MITRE ATT&CK (20)
Products (2)
Tools (5)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.