Emergence of Tsundere Botnet Targeting Windows Users

Emergence of Tsundere Botnet Targeting Windows Users

First seen 2 Dec 2025, 18:33 UTC •KasperskyScworld •82% similarity •24.4

Article Content

Browse articles
ThreatCluster

The Tsundere botnet, discovered by Kaspersky in July 2025, targets Windows systems through a fake MSI installer masquerading as game setup files. It has been detected in multiple countries including Mexico, Chile, Russia, and Kazakhstan, and utilizes the Ethereum blockchain for command-and-control operations.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

123 Stealer Tsundere Tsundere Botnet Russian Npm Campaign Ethereum Ethereum Blockchain WebSocket Windows