HOMETHREATSAcidRain
APT / THREAT GROUP

AcidRain

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

A MIPS ELF binary with wiper functionality used against Viasat KA-SAT modems.

Threat Analysis

AcidRain is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://cybersecurity.att.com/blogs/labs-research/analysis-on-recent-wiper-attacks-examples-and-how-they-wiper-malware-works
→https://cybersecuritynews.com/acidrain-wiper-malware/
→https://www.bleepingcomputer.com/news/security/viasat-confirms-satellite-modems-were-wiped-with-acidrain-malware/
→https://www.fortinet.com/blog/threat-research/the-increasing-wiper-malware-threat
→https://www.reversemode.com/2022/03/viasat-incident-from-speculation-to.html

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

elf.acidrainAcidRain

External Intelligence

Malpedia: elf.acidrain

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search AcidRain