Cyber ​​danger Raspberry Robin

B2B Cyber ​​Security ShortNews

Share post

A leading provider of an AI-powered, cloud-delivered cybersecurity platform warns about Raspberry Robin.

The malware was first discovered in 2021 and stands out for its remarkable adaptability and sophistication in its operations.

  • Rapid development of exploits: Raspberry Robin takes advantage of new 1-day Local Privilege Escalation (LPE) exploits that were developed in plain sight. This suggests either internal development capability or access to a very sophisticated exploit market.
  • Innovative distribution and circumvention techniques: A novel distribution method via Discord and sophisticated evasion strategies improve stealth, making detection by traditional security measures more difficult.
  • Adaptive communication and movement: Modifications to communication methods and lateral movement techniques have been developed to bypass behavioral signatures based on previous versions, demonstrating the malware's adaptability.

In a previous report, Check Point researchers examined Raspberry Robin as an example of detecting and countering various evasion methods. They discovered some unique and innovative methods and analyzed the two exploits that Raspberry Robin uses to gain higher privileges, showing that the malware also has capabilities in the area of ​​exploits.

Raspberry Robin Exploits

Two new 1-day LPE exploits have been introduced these days. The malware most likely either has access to a dedicated exploit developer or decent capacity to quickly develop exploits on its own. The distribution of the malware has also evolved: Discord is now used for distribution, marking a departure from previous methods that focused primarily on USB drives.

The constant improvements in malware introduce new features and evasion mechanisms aimed at remaining undetected by security defenses. The malware has subtly altered its communication strategies and lateral movement techniques to evade detection, underscoring its developers' commitment to evading security measures. Raspberry Robin's ability to quickly incorporate newly discovered vulnerabilities into its arsenal is further evidence of its high threat level, as it exploits vulnerabilities before many companies have deployed patches.

More at


About check point

Check Point Software Technologies GmbH ( is a leading provider of cybersecurity solutions for public administrations and companies worldwide. The solutions protect customers from cyberattacks with an industry leading detection rate for malware, ransomware and other types of attacks. Check Point offers a multi-level security architecture that protects company information in cloud environments, networks and on mobile devices, as well as the most comprehensive and intuitive “one point of control” security management system. Check Point protects over 100.000 businesses of all sizes.


Matching articles on the topic

Report: 40 percent more phishing worldwide

The current spam and phishing report from Kaspersky for 2023 speaks for itself: users in Germany are after ➡ Read more

BSI sets minimum standards for web browsers

The BSI has revised the minimum standard for web browsers for administration and published version 3.0. You can remember that ➡ Read more

Stealth malware targets European companies

Hackers are attacking many companies across Europe with stealth malware. ESET researchers have reported a dramatic increase in so-called AceCryptor attacks via ➡ Read more

IT security: Basis for LockBit 4.0 defused

Trend Micro, working with the UK's National Crime Agency (NCA), analyzed the unpublished version that was in development ➡ Read more

MDR and XDR via Google Workspace

Whether in a cafe, airport terminal or home office – employees work in many places. However, this development also brings challenges ➡ Read more

Mobile spyware poses a threat to businesses

More and more people are using mobile devices both in everyday life and in companies. This also reduces the risk of “mobile ➡ Read more

Test: Security software for endpoints and individual PCs

The latest test results from the AV-TEST laboratory show very good performance of 16 established protection solutions for Windows ➡ Read more

FBI: Internet Crime Report counts $12,5 billion in damage 

The FBI's Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, which includes information from over 880.000 ➡ Read more