Bloody Wolf Group Uses Fake Government Emails and Malicious PDFs to Deploy NetSupport RAT

Cyberpress • December 1, 2025

Share: View original

NetSupport RAT - A new cybersecurity investigation has revealed that the advanced persistent threat (APT) group known as Bloody Wolf.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bloody Wolf Hackers Deploy NetSupport RAT via Fake Government PDFs The Bloody Wolf hacking group has been identified using fake government emails and weaponized PDFs to deploy the NetSupport Remote Access Trojan (RAT). This advanced persistent threat (APT) targets various organizations by masquerading as legitimate government communications. The malicious PDFs are designed to compromise systems and facilitate unauthorized access. 3 sources 42

Extracted Entities

APT Groups (1)

Attack Types (3)

Malware Phishing Trojan

Malware (1)