Threat actor
Curly COMrades
Russia
Tracked by CyberSIXT since 5 Nov 2025
- Articles · all time
- 3
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
Three articles so far, 5 Nov 2025 to 6 Nov 2025.
- Curly COMrades Hacker Group Deploys New Tools for Stealthy Remote Access on Compromised Windows 10 SystemsGBHackers
- Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VMSecurityOnline
- Alleged Russia-linked Curly COMrades exploit Windows Hyper-V to evade EDRsSecurity Affairs
Names and sources
- Curly COMrades
- Named by CyberSIXT coverage
- Curly COMrades
- Named by Malpedia · curly_comrades
- Curly COMrades
- Named by MISP Galaxy · 7bf6ae38-fcd3-4a99-99ba-292990a27f0a
- 7bf6ae38-fcd3-4a99-99ba-292990a27f0a
- Named by CyberSIXT coverage
Attributed facts
- origin
- Russia (MISP Galaxy · 7bf6ae38-fcd3-4a99-99ba-292990a27f0a)
- Alleged Russia-linked Curly COMrades exploit Windows Hyper-V to evade EDRsSecurity Affairs
- Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VMSecurityOnline
- Curly COMrades Hacker Group Deploys New Tools for Stealthy Remote Access on Compromised Windows 10 SystemsGBHackers · first in our coverage