Skip to content

Malware

Raspberry Robin

aka RaspberryRobin · QNAP-Worm · LINK_MSIEXEC

Worm spread by external drives that leverages Windows Installer to reach out to QNAP-associated domains and download a malicious DLL.

Raspberry Robin, also known as RaspberryRobin, QNAP-Worm, LINK_MSIEXEC, is a Windows malware family.

Background

A worm that propagates via external drives and abuses Windows Installer to contact QNAP-associated domains and pull down a malicious DLL.


Source: Malpedia (Fraunhofer FKIE).