Skip to content
ThreatCluster

Bloody Wolf Hackers Deploy NetSupport RAT via Fake Government PDFs

First seen 1 Dec 2025, 18:41 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

The Bloody Wolf hacking group has been identified using fake government emails and weaponized PDFs to deploy the NetSupport Remote Access Trojan (RAT). This advanced persistent threat (APT) targets various organizations by masquerading as legitimate government communications. The malicious PDFs are designed to compromise systems and facilitate unauthorized access.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Bloody Wolf and NetSupport RAT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed