Threat Investigation
Request a demo
State-sponsored

RAZOR TIGER

RAZOR TIGER is classified as state-sponsored.

Malware families
3
Suspected state sponsor
India
Also known as
4

An actor mainly targeting Pakistan military targets, active since at least 2012. We have low confidence that this malware might be authored by an Indian company. To spread the malware, they use unique implementations to leverage the exploits of known vulnerabilities (such as CVE-2017-11882) and later deploy a Powershell payload in the final stages.

The group is suspected of operating with the support of India.

The group is associated with 3 malware families.

Also known as: SideWinder, Rattlesnake, APT-C-17, T-APT-04

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

RAZOR TIGER · Threat actors · Dark Radar