Back Gbhackers

Bloody Wolf Cybercrime Group Uses NetSupport RAT to Breach Organizations

Gbhackers •Mayura Kathir • February 10, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bloody Wolf Intensifies Spear-Phishing Campaign Using NetSupport RAT The threat actor known as Bloody Wolf has escalated its spear-phishing campaign targeting organizations in Uzbekistan and Russia, utilizing the remote administration tool NetSupport RAT. Active since at least 2023, this campaign employs sophisticated techniques including custom Java-based loaders and multi-layered persistence mechanisms, with infrastructure overlap with IoT malware like the Mirai botnet. The group has also targeted government and private sectors in Kyrgyzstan since June 2025, using weaponized PDF documents that mimic official communications. 6 sources 29

Bloody Wolf Cybercrime Group Uses NetSupport RAT to Breach Organizations

The full story

Extracted Entities

Attack Types (2)

Malware (1)