Cisco Talos published IOCs ↗
- Evidence class
- provider reported
- Source family label
- RainyDay - S0629
- Source confidence
- Not reported
- Observed
- 2025-09-28 19:50 UTC
- Retrieved
- 2026-10-08 06:17 UTC
RainyDay - S0629
Name of ATT&CK software | [RainyDay](https://attack.mitre.org/software/S0629) is a backdoor tool that has been used by [Naikon](https://attack.mitre.org/groups/G0019) since at least 2020.(Citation: Bitdefender Naikon April 2021)
Reference details
- Primary displayed family label
- RainyDay - S0629
- Source context
2025/09/how-rainyday-turian-and-a-new-plugx-variant-abuse-dll-search-order-hijacking.json- First reported
- 2025-09-28 19:50 UTC
- Last reported
- 2025-09-28 19:50 UTC
- Catalog updated
- 2026-10-08 06:17 UTC
Source family labels
Tags
Published indicators
Network addresses are displayed in defanged form.
No file hashes or network indicators were published in this record.