Malware
FurBall
- First Reported
- Jul 1, 2026
- Latest Reported
- Jul 1, 2026
Reported Context (1)
- Each group is tracked separately and uses unique tradecraft, specific malware (MarkiRAT, FurBall, DCHSpy, and BouldSpy), and infrastructure, and is almost uniquely dedicated to supporting the Iranian government and Iran-Linked TAG-182 Uses MarkiRAT to Spy on Farsi-Speaking Targets
Malware (3)
Threat Actors (5)
MITRE ATT&CK (6)
Products (3)
Tools (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.