Back Gbhackers

Hackers Deploy USB Malware, RATs, and Stealers in Southeast Asian Government Attacks

Gbhackers •Mayura Kathir • March 27, 2026

A multi-cluster cyberespionage operation in which attackers used USB-propagated malware, multiple RATs, loaders, and a custom stealer to target a Southeast Asian government organization between June and August 2025. Analysts initially observed USB-borne malware dubbed USBFect (also known as HIUPAN), which spreads through removable drives and deploys the PUBLOAD backdoor for lateral movement. Further telemetry revealed two […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

USB Malware and RATs Target Southeast Asian Government in Cyberespionage Campaign Between June and August 2025, a coordinated cyberespionage operation targeted a Southeast Asian government organization. Attackers deployed USB-propagated malware, including a variant named USBFect (also known as HIUPAN), which facilitates the installation of the PUBLOAD backdoor for lateral movement within the network. The operation involved multiple remote access trojans (RATs) and custom data stealers to maintain long-term access to sensitive systems. Analysts identified three separate clusters of activity occurring simultaneously, indicating a sophisticated and well-planned attack strategy. The full scope of the impact is still being assessed, but the use of USB devices as an attack vector highlights a significant security vulnerability. Current status indicates ongoing investigations into the breach and potential mitigation strategies being developed. 2 sources 71

Extracted Entities

Hackers Deploy USB Malware, RATs, and Stealers in Southeast Asian Government Attacks

The full story

Extracted Entities

Attack Types (1)

Industries (1)

Malware (3)