HOMETHREATSSaint Bot
APT / THREAT GROUP

Saint Bot

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.saint_bot

Threat Analysis

Saint Bot is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.malwarebytes.com/threat-analysis/2021/04/a-deep-dive-into-saint-bot-downloader/
→https://cert.gov.ua/article/18419
→https://inquest.net/blog/2022/04/07/ukraine-cyberwar-overview
→https://lifars.com/2022/03/a-closer-look-at-the-russian-actors-targeting-organizations-in-ukraine/
→https://unit42.paloaltonetworks.com/atoms/nascentursa/

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

Saint Botwin.saint_bot

External Intelligence

Malpedia: win.saint_bot

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Saint Bot