Netskope Threat Labs

Rustbucket

ATP Sandbox Adv. HeuristicsNetskope IPS

RustBucket is a malware loader attributed to Bluenoroff, a North Korean threat actor focused on financial gain. Sekoia documented its campaign infrastructure in 2023, and researchers have connected the family to the wider ecosystem of North Korean cyber operations.

First seen
August 2023
Last seen
October 2026
RustBucket
Alert Name
MacOS.Trojan.Rustbucket
MacOS.Trojan.RustBucket