Skip to content
MalwareWiki

Malware

Slingshot

- 2012 first sighted - Attack vector via compromised Mikrotik routers where victims get infection when they connect to Mikrotik router admin software - Winbox - 2018 when discovered by Kaspersky Team

Slingshot is a Windows malware family.

Background

First observed in 2012 and uncovered by the Kaspersky team in 2018, Slingshot spread through compromised Mikrotik routers, infecting victims when they connected using the Mikrotik admin tool Winbox.

The infection path ran as follows: a malicious DLL (IP4.dll) was planted on a compromised Mikrotik router, and when a user connected via Winbox the malicious DLL was pulled down onto their computer.

Source: Malpedia (Fraunhofer FKIE).