Rover
- ID
- S0090
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
Rover is malware suspected of being used for espionage purposes. It was used in 2015 in a targeted email sent to an Indian Ambassador to Afghanistan. [1]
Techniques used (10)
- T1005 Data from Local System
- T1020 Automated Exfiltration
- T1025 Data from Removable Media
- T1056.001 Keylogging
- T1074.001 Local Data Staging
- T1083 File and Directory Discovery
- T1112 Modify Registry
- T1113 Screen Capture
- T1119 Automated Collection
- T1547.001 Registry Run Keys / Startup Folder