New: 2026 Gartner® Market Guide for Adversarial Exposure Validation
Learn More
Cymulate named a Customers' Choice in 2025 Gartner® Peer Insights™
Learn More
New Research: The Security Tradeoffs Behind AI Tooling
Learn More
An Inside Look at the Technology Behind Cymulate
Learn More

Raspberry Robin Worm Abuses Windows Installer and QNAP Devices

July 13, 2022

Raspberry Robin is a spreading threat, using specifically crafted Microsoft links (LNK files) to infect its victims.
Cybereason observed delivery through file archives, removable devices (USB) or ISO files.
Raspberry Robin is a persistent threat.
Once the malware infects a machine, it establishes persistence by running at every system startup.
Cybereason observed a majority of the victims being located in Europe.