NetTraveler

malware OpenTrojan Threat Intelligence

Espionage backdoor

Source Attribution

Origin
MITRE
Source
Kaspersky 2013
Verified
2026-08-26T16:12:23.328Z
Confidence
high

Source: Kaspersky 2013 · Verified: 2026-08-26T16:12:23.328Z · Confidence: high

Security Timeline

  • discovered NetTraveler first observed
  • updated Encyclopedia entry reviewed (Phase 45C)

Quick Answer

NetTraveler (RedStar) is an espionage backdoor active since 2010 against energy and research targets. (attributes recorded from Kaspersky 2013).

Definition

NetTraveler (RedStar) is an espionage backdoor active since 2010 against energy and research targets.

Overview

NetTraveler (RedStar) is an espionage backdoor active since 2010 against energy and research targets.

Behavior

  • Keylog + file theft
  • long-running

First Seen

2010-01

Target

Espionage backdoor

Malware Intelligence

Family: NetTraveler

Techniques: T1071, T1105

Targets: Espionage backdoor

Behavior:
  • Keylog + file theft
  • long-running

References

Have a follow-up question?

Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.

Ask AI about this Start an investigation

Start Investigation

Move from reading to investigating NetTraveler. The workspace is a structured analysis surface — not a chat — organised as:

  1. Question — what do you need to know about NetTraveler?
  2. Evidence — assertions mapped to verifiable references.
  3. Timeline — events in chronological order.
  4. Related Entities — CVE, threat actor, campaign, malware links.
  5. Sources — NVD, CISA KEV, MITRE ATT&CK, vendor advisories.
  6. Notes — your own observations and working hypotheses.

AI assistance is limited to summarising, explaining, and suggesting related evidence. AI never completes your investigation, modifies entity relationships, or generates facts — all published analysis stays human-reviewed.

Start Investigation Open Workspace

Recommended Tools

Every tool runs passively or locally — inputs are never stored and no target is scanned.Start an investigation on this entity →