SYMBOLCOMMON_NAMEaka. SYNONYMS
vbs.tamecat (Back to overview)

TAMECAT

Actor(s): APT42


TAMECAT is PowerShell-based backdoor with modular components designed to facilitate data exfiltration and remote control

References
2025-11-13Israel National Digital AgencyAdi Pick, Hila David, Idan Beit-Yosef, Shimi Cohen, Yaniv Goldman
SpearSpecter: Unmasking Iran’s IRGC Cyber Operations Targeting High-Profile Individuals
TAMECAT
2024-05-01MandiantAdrian Hernandez, Asli Koksal, Jonathan Leathery, Ofir Rozmann, Sarah Bock
Uncharmed: Untangling Iran's APT42 Operations
TAMECAT

There is no Yara-Signature yet.