Skip to content
MalwareWiki

Malware

TONERJAM

According to Symantec, Grager was deployed against three organizations in Taiwan, Hong Kong, and Vietnam in April 2024.

TONERJAM is a Windows malware family.

Background

Symantec reports that Grager was used against three organizations located in Taiwan, Hong Kong, and Vietnam in April 2024. Examination of the backdoor showed it leveraged the Graph API to talk to a C&C server hosted on Microsoft OneDrive. The malware was pulled from a typosquatted URL impersonating the open-source file archiver 7-Zip.

Source: Malpedia (Fraunhofer FKIE).