Netskope Threat Labs

SuperBear

ATP Sandbox Adv. Heuristics

SuperBear is a remote access tool that researchers have tracked in campaigns targeting the Rohingya community and Southeast Asian government entities, delivered through malicious RTF documents that exploit the Equation Editor vulnerability.

First seen
October 2023
Last seen
September 2026
Alert Name
Email-MSG.Trojan.SuperBear
Script-AutoIt.Trojan.SuperBear