Litterdrifter

LitterDrifter is a malicious software (malware) that has been identified as a tool of the Russian Advanced Persistent Threat (APT) group, Gamaredon. This malware is particularly insidious as it is spread via USB drives, allowing for both direct and indirect infection of targeted systems. It was initially observed in use against Ukraine, but its reach has since expanded globally. The first instances of LitterDrifter being used by Gamaredon were reported in November 2023. The malware was propagated through USB devices and primarily targeted Ukrainian systems. However, it quickly became clear that this was not an isolated attack but part of a broader campaign by the Russian APT group. Since then, Gamaredon's LitterDrifter worm has been found in a diverse range of countries including Chile, Germany, Poland, South Korea, the US, and Vietnam. This indicates a significant escalation in Gamaredon's activities and suggests a global threat. It underscores the need for robust cybersecurity measures, particularly in relation to removable storage devices, to prevent further propagation of this harmful malware.