HOMETHREATSTSCookie
MALWARE FAMILY

TSCookie

Internal ID: elf.tscookie
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying elf.tscookie. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

TSCookie is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://blogs.jpcert.or.jp/en/2020/03/elf-tscookie.html
→https://jp.security.ntt/resources/EN-BlackTech_2021.pdf
→https://jsac.jpcert.or.jp/archive/2020/pdf/JSAC2020_0_JPCERT_en.pdf
→https://summit.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf
→https://twitter.com/ESETresearch/status/1382054011264700416
→https://www.cyberandramen.net/home/blacktech-doesnt-miss-a-step-a-quick-analysis-of-a-busy-2020
→https://www.intezer.com/blog/cloud-security/top-linux-cloud-threats-of-2020/
→https://www.ironnet.com/blog/china-cyber-attacks-the-current-threat-landscape
→https://www.macnica.net/file/mpressioncss_ta_report_2019_2_nopw.pdf
→https://www.macnica.net/file/mpressioncss_ta_report_2019_4.pdf

Quick Facts

TypeMalware Family
Aliases1

Also Known As

elf.tscookie

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search TSCookie