HOMETHREATSMoose
APT / THREAT GROUP

Moose

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: elf.moose

Threat Analysis

Moose is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://gosecure.net/2016/11/02/exposing-the-ego-market-the-cybercrime-performed-by-the-linux-moose-botnet/
→http://www.welivesecurity.com/2015/05/26/moose-router-worm/
→http://www.welivesecurity.com/2016/11/02/linuxmoose-still-breathing/
→https://web-assets.esetstatic.com/wls/2015/05/Dissecting-LinuxMoose.pdf
→https://www.virusbulletin.com/uploads/pdf/magazine/2018/VB2018-Paquet-Clouston.pdf

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

Mooseelf.moose

External Intelligence

Malpedia: elf.moose

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Moose
Moose — APT / Threat Group | Threat Intelligence | CTIWATCH.COM