Introducing Cymulate Vero AI for Agentic Cyber Defense Engineering
Learn More
New: 2026 Gartner® Market Guide for Adversarial Exposure Validation
Learn More
New Research: Exploiting Configuration Trust in AI Coding Tools
Learn More
New Case Study: How a Financial Authority Validates Cyber Resilience
Learn More

Raspberry Robin Worm Abuses Windows Installer and QNAP Devices

July 13, 2022

Raspberry Robin is a spreading threat, using specifically crafted Microsoft links (LNK files) to infect its victims.
Cybereason observed delivery through file archives, removable devices (USB) or ISO files.
Raspberry Robin is a persistent threat.
Once the malware infects a machine, it establishes persistence by running at every system startup.
Cybereason observed a majority of the victims being located in Europe.