Back Cybersecuritynews

Bloody Wolf Hackers Attacking Organizations to Deploy NetSupport RAT and Gain Remote Access

Cybersecuritynews •Tushar Subhra Dutta • February 10, 2026

Stan Ghouls, a cybercriminal group also known as Bloody Wolf, has launched a sophisticated wave of targeted attacks against organizations across Russia and Uzbekistan. Active since at least 2023, the group focuses heavily on the manufacturing, finance, and IT sectors. While they previously favored the STRRAT remote access trojan, their recent campaigns demonstrate a tactical […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bloody Wolf Intensifies Spear-Phishing Campaign Using NetSupport RAT The threat actor known as Bloody Wolf has escalated its spear-phishing campaign targeting organizations in Uzbekistan and Russia, utilizing the remote administration tool NetSupport RAT. Active since at least 2023, this campaign employs sophisticated techniques including custom Java-based loaders and multi-layered persistence mechanisms, with infrastructure overlap with IoT malware like the Mirai botnet. The group has also targeted government and private sectors in Kyrgyzstan since June 2025, using weaponized PDF documents that mimic official communications. 6 sources 29

Extracted Entities

Bloody Wolf Hackers Attacking Organizations to Deploy NetSupport RAT and Gain Remote Access

The full story

Extracted Entities

Attack Types (1)

Countries (2)

Industries (1)

Malware (2)