Rover

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.rover

Threat Analysis

Rover is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning Rover

Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover

Infosecurity Magazine· Jun 29, 2026

Meta pauses controversial employee-tracking program after security review

Malwarebytes Labs· Jun 23, 2026

Infosecurity Europe: Why JLR’s CISO Enforced In-Person Password Resets Following Cyber-Attack

Infosecurity Magazine· Jun 9, 2026

Senate Extends Surveillance Powers Until April 30 After Chaotic Votes in House

SecurityWeek· Apr 20, 2026

The Controversies Finally Caught Up to Kristi Noem

Wired Security· Mar 5, 2026

Supreme Court to decide whether geofence warrants are constitutional

Malwarebytes Labs· Mar 5, 2026

External References

→http://researchcenter.paloaltonetworks.com/2016/02/new-malware-rover-targets-indian-ambassador-to-afghanistan/

→https://securelist.com/apt-trends-report-q3-2020/99204/

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

win.roverRover

External Intelligence

Malpedia: win.rover

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Rover