Worok

MISP
Type:
Nation-state
Country:
CN
First seen:
Unknown
Details:

Worok is a cyber espionage group, mostly targeting Central Asia. The group toolset includes a C++ loader named CLRLoad, a PowerShell backdoor named PowHeartBeat, and a C# loader named PNGLoad.

Metadata
ID: 426
Created: 13/01/2026 17:48
Updated: 11/09/2026 04:00