Raspberry Robin: Copy Shop USB Worm Evolves to Initial Access …
Mar 25, 2025 · From 2019 to 2023, Raspberry Robin infected devices via “Bad USB” attacks, most often with print and copy shops. The infected USB drive contained a Windows shortcut …
Evolution of USB-Borne Malware, Raspberry Robin | Huntress
Users interact with a file on a USB device, and then their system becomes infected with the Raspberry Robin malware. Raspberry Robin has been seen to be part of a much larger …
Raspberry Robin, Software S1130 - MITRE ATT&CK®
Raspberry Robin is initial access malware first identified in September 2021, and active through early 2024. The malware is notable for spreading via infected USB devices containing a …
Raspberry Robin Malware: USB Worm Turned Initial Access …
Mar 27, 2025 · Raspberry Robin, first detected in 2021, has rapidly evolved from a relatively straightforward USB worm into a full-fledged Initial Access Broker (IAB) and malware loader …
Raspberry Robin - Red Canary Threat Detection Report
A Raspberry Robin infection often starts when a user plugs an infected USB drive into their endpoint. Based on community feedback we received after our blog post, one common source …
Raspberry Robin: A global USB malware campaign providing …
May 2, 2023 · Raspberry Robin has shown itself to be an emerging player in the big game hunting ransomware ecosystem. USB malware has proven to be an old, yet still effective method to …
THREAT ALERT: Raspberry Robin Worm Abuses Windows
Raspberry Robin involves a worm that spreads over USB devices or shared folders, leveraging compromised QNAP (Network Attached Storage or NAS) devices as stagers. It uses an old …
Resurgent USB Malware: Battling Raspberry Robin - SenseOn
May 1, 2024 · First spotted in the wild in 2021, Raspberry Robin is a type of worm-like malware replicating itself through removable USB flash drives. In Q4 last year, Raspberry Robin was …
Raspberry Robin gets the worm early - Red Canary
May 5, 2022 · Raspberry Robin is typically introduced via infected removable drives, often USB devices. The Raspberry Robin worm often appears as a shortcut .lnk file masquerading as a …
Raspberry Robin Malware: Evolving Threat Spreads Beyond USBs
Mar 25, 2024 · Raspberry Robin, discovered by Red Canary in 2021, began as a worm, propagating through USB devices and infiltrating infected systems. However, it has evolved …
- Some results have been removed