Netskope Threat Labs

Fragtor

ATP Sandbox Adv. HeuristicsAV

Fragtor is a trojan that spreads through USB drives and network shares while stealing sensitive information from infected systems. Its worm like propagation copies itself to removable media, so infections hop between machines as users share storage devices, and it can download additional payloads from remote servers. The family thrives in networks where shared drives and unrestricted removable media are common.

First seen
January 2022
Last seen
October 2026
fragtor
Alert Name
Binary.Malware.Fragtor
Binary.Trojan.Fragtor
ByteCode-MSIL.Infostealer.Fragtor
ByteCode-MSIL.Trojan.Fragtor
Gen:Variant.Adware.Fragtor.1018
Gen:Variant.Adware.Fragtor.1227
Gen:Variant.Adware.Fragtor.1505
Gen:Variant.Adware.Fragtor.1789
Gen:Variant.Adware.Fragtor.20
Gen:Variant.Adware.Fragtor.2171