H-Worm

Description

(FireEye) H-worm is a VBS (Visual Basic Script) based RAT written by an individual going by the name Houdini. We believe the author is based in Algeria and has connections to njq8, the author of njw0rm and njRAT/LV through means of a shared or common code base. We have seen the H-worm RAT being employed in targeted attacks against the international energy industry; however, we also see it being employed in a wider context as run of the mill attacks through spammed email attachments and malicious links.

Names

Name
H-Worm
H-Worm RAT
Houdini RAT
Houdini
Hworm
Njw0rm
Iniduoh
Jenxcus
Kognito
WSHRAT
dinihou
dunihi

Category

Malware

Type

  • Backdoor
  • Info stealer

Information

Malpedia

Alienvault Otx

Other Information

Uuid

1f72516d-bbb2-465d-b747-94eb664cb96e

Last Card Change

2022-12-29