Inside the 1,000 Red October Cyberespionage Malware Modules

The Red October espionage campaign involved over 1,000 malware modules used for targeted attacks, targeting victims in 39 countries, primarily diplomats, researchers, and military facilities. The attackers tailored the attack toolset for victims' environments and employed various tactics, including the use of persistent tasks, logging keystrokes, recording screenshots, and retrieving email messages. Additionally, the campaign targeted USB drives, mobile devices, and documents with the acid* extension, referring to classified Acid Cryptofiler software