Malware
HOPPINGANT
- First Reported
- Mar 14, 2026
- Latest Reported
- Mar 14, 2026
Reported Context (1)
- spear-phishing ZIP attachments containing malicious LNK files to download a JavaScript loader dubbed HOPPINGANT from filebulldogs[.]com, which ultimately deploys Rclone (l.exe) to exfiltrate documents to MEGA. Seqrite Details Operation CamelClone Espionage Campaign Using HOPPINGANT and Rclone
MITRE ATT&CK (8)
Tools (1)
Industries (3)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.