Malware
TinyRCT
- First Reported
- Jun 26, 2026
- Latest Reported
- Jun 26, 2026
Reported Context (2)
- A Chinese-speaking APT group tracked as CL-STA-1062 has been linked to attacks on government entities and critical infrastructure in Southeast Asia using a new custom backdoor called TinyRCT. CL-STA-1062 Uses TinyRCT Backdoor in Southeast Asia Campaign
- CL-STA-1062 is a Chinese-speaking threat cluster that targeted government entities and critical energy infrastructure in Southeast Asia in 2025, using web shells, open-source tools, and a new backdoor called TinyRCT. Unit 42 Details CL-STA-1062 Campaign and TinyRCT Backdoor Targeting Southeast Asia
Threat Actors (1)
MITRE ATT&CK (20)
Vendors (1)
Products (6)
Tools (5)
Industries (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.