Skip to content
MalwareWiki

Malware

FLASHFLOOD

FLASHFLOOD will scan inserted removable drives for targeted files, and copy those files from the removable drive to the FLASHFLOOD-infected system.

FLASHFLOOD is a Windows malware family operated by APT 30.

Background

FLASHFLOOD inspects removable drives that are plugged in for files of interest and transfers any matches from the drive onto the FLASHFLOOD-infected machine. It can also record or copy further data from the victim system, including system information and contacts.

Source: Malpedia (Fraunhofer FKIE).