New: Threat Exposure Validation Impact Report 2025
Learn More
Join our Summer Webinar Series on Threat Exposure Validation
Register Now

Raspberry Robin Worm Abuses Windows Installer and QNAP Devices

July 13, 2022

Raspberry Robin is a spreading threat, using specifically crafted Microsoft links (LNK files) to infect its victims.
Cybereason observed delivery through file archives, removable devices (USB) or ISO files.
Raspberry Robin is a persistent threat.
Once the malware infects a machine, it establishes persistence by running at every system startup.
Cybereason observed a majority of the victims being located in Europe.