APT / THREAT GROUP

Parrot TDS

aliases

Last seen:Mar 17, 2026

Intelligence Profile

This malicious code written in JavaScript is used as Traffic Direction System (TDS). This TDS showes similarities to the Prometheus TDS. According to DECODED Avast.io this TDS has been active since October 2021.

Threat Analysis

Parrot TDS is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://decoded.avast.io/janrubin/parrot-tds-takes-over-web-servers-and-threatens-millions/

→https://unit42.paloaltonetworks.com/parrot-tds-javascript-evolution-analysis/

→https://www.silentpush.com/blog/socgholish/

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

js.parrot_tdsParrot TDS

External Intelligence

Malpedia: js.parrot_tds

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Parrot TDS