{"id":49077,"date":"2022-10-28T10:01:47","date_gmt":"2022-10-28T10:01:47","guid":{"rendered":"http:\/\/b2e1e5e5-603b-4aae-b262-ded18a67f641"},"modified":"2022-10-28T10:01:47","modified_gmt":"2022-10-28T10:01:47","slug":"microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/","title":{"rendered":"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month"},"content":{"rendered":"
\n
\n
\"USB<\/picture><\/div>\n

<\/div>\n

Image: M-A-U \/ Getty Images<\/span><\/figcaption><\/figure>\n

Microsoft is warning that the relatively new Raspberry Robin USB drive worm has triggered payload alerts on nearly 3,000 devices in almost 1,000 organizations in the past 30 days. <\/p>\n

Raspberry Robin malware has previously been seen installed with FakeUpdates malware, which has been linked to the Russian cyber-crime group EvilCorp. Raspberry Robin has also been used to deploy Lockbit ransomware, as well as IcedID, Bumblebee, and Truebot malware. Now, Microsoft has seen it being used to deploy Clop ransomware<\/a>.<\/p>\n

Microsoft attributes Clop deployments connected with the use of Raspberry Robin to a group it tracks as DEV-0950. Its activities overlap with the advanced hacking groups tracked by FireEye as FIN11<\/a>. The group last year published its victims’ data on the Clop ransomware leak site.<\/p>\n

“DEV-0950 traditionally uses phishing to acquire the majority of their victims, so this notable shift to using Raspberry Robin enables them to deliver payloads to existing infections and move their campaigns more quickly to ransomware stages,” notes the Microsoft Security Threat Intelligence Center (MSTIC)<\/a>.<\/p>\n

Also: <\/strong>Ransomware: Why it’s still a big threat, and where the gangs are going next<\/strong><\/a><\/p>\n

Security firm Red Canary discovered the Raspberry Robin worm in September 2021<\/a> and said it was often installed on Windows systems via a USB drive, which contains a LNK shortcut file disguised as a folder. The malware relies on victims inserting a USB drive to run. While autorun of removable media is disabled by default on Windows, Microsoft notes that many organizations enable it through legacy Group Policy changes. <\/p>\n

MSTIC has found that Raspberry Robin relies on both autorun and tricking users into clicking the LINK file. <\/p>\n

“Some Raspberry Robin drives only have the LNK and executable files, while drives from earlier infections have a configured autorun.inf,” MSTIC notes.  <\/p>\n

This change could explain why the names of the shortcut files changed from more generic names like recovery.lnk to brand names of USB drives. Microsoft suspects this is to encourage a user to execute the LNK file. It also calls on compromised QNAP storage appliances to deliver a malicious payload.    <\/p>\n

“Raspberry Robin’s LNK file points to cmd.exe to launch the Windows Installer service msiexec.exe and install a malicious payload hosted on compromised QNAP network attached storage (NAS) devices,” MSTIC explains. <\/p>\n

As of July, FakeUpdates, a JavaScript backdoor, tapped Raspberry Robin for delivery, adding to malicious ads that were previously used for delivery. <\/p>\n

Also: <\/strong>What, exactly, is cybersecurity? And why does it matter?<\/strong><\/a><\/p>\n

Microsoft has found some connections between Raspberry Robin and another piece of malware called Fauppod, which also communicates compromised QNAP appliances. Fauppod is a heavily obfuscated piece of malware written in .NET. Microsoft believes Fauppod is part of the initial method by which Raspberry Robin infects machines.<\/p>\n

“Based on our investigation, Microsoft currently assesses with medium confidence that the above .NET DLLs delivered both by Raspberry Robin LNK infections and Fauppod CPL samples are responsible for spreading Raspberry Robin LNK files to USB drives. These LNK files, in turn, infect other hosts via the infection chain detailed in Red Canary’s blog.”<\/p>\n

“Microsoft also assesses with medium confidence that the Fauppod-packed CPL samples are currently the earliest known point in the attack chain for propagating Raspberry Robin infections to targets. Microsoft findings suggest that the Fauppod CPL entities, the obfuscated .NET LNK spreader modules they drop, the Raspberry Robin LNK files Red Canary documented, and the Raspberry Robin DLL files (or, Roshtyak, as per Avast) could all be considered as various components to the “Raspberry Robin” malware infection chain.”<\/p>\n

Microsoft also backed up IBM’s previous assertion that Fauppod was linked to the notorious Dridex banking trojan<\/a>.<\/p>\n

\n

More Microsoft<\/h3>\n<\/p><\/div>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Widely distributed worm evolves into one of the largest currently active malware distribution platforms.
\nREAD MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-49077","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"\nMicrosoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-10-28T10:01:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\/2022\/10\/28\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\/usb-malware-getty.jpg?auto=webp&width=1200\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month\",\"datePublished\":\"2022-10-28T10:01:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/\"},\"wordCount\":638,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\\\/2022\\\/10\\\/28\\\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\\\/usb-malware-getty.jpg?auto=webp&width=1200\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/\",\"name\":\"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\\\/2022\\\/10\\\/28\\\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\\\/usb-malware-getty.jpg?auto=webp&width=1200\",\"datePublished\":\"2022-10-28T10:01:47+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\\\/2022\\\/10\\\/28\\\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\\\/usb-malware-getty.jpg?auto=webp&width=1200\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\\\/2022\\\/10\\\/28\\\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\\\/usb-malware-getty.jpg?auto=webp&width=1200\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-10-28T10:01:47+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\/2022\/10\/28\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\/usb-malware-getty.jpg?auto=webp&width=1200","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month","datePublished":"2022-10-28T10:01:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/"},"wordCount":638,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\/2022\/10\/28\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\/usb-malware-getty.jpg?auto=webp&width=1200","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/","url":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/","name":"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\/2022\/10\/28\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\/usb-malware-getty.jpg?auto=webp&width=1200","datePublished":"2022-10-28T10:01:47+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\/2022\/10\/28\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\/usb-malware-getty.jpg?auto=webp&width=1200","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/fda65979a54f1d6647a5001ada07a5fa9c99a1a4\/2022\/10\/28\/1ddec0b1-606f-43f1-b487-3ab844dcc0ad\/usb-malware-getty.jpg?auto=webp&width=1200"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-raspberry-robin-usb-worm-hits-nearly-1000-organizations-in-the-past-month\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft: Raspberry Robin USB worm hits nearly 1,000 organizations in the past month"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/49077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=49077"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/49077\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=49077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=49077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=49077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}