Worok is a cyber espionage group, mostly targeting Central Asia. The group toolset includes a C++ loader named CLRLoad, a PowerShell backdoor named Po...
Actor Overview
Origin Country
CN
Suspected Sponsor
China
Incident Types
Espionage
Target Industries
GovernmentEnergy Company
Suspected Victims
East AsiaCentral AsiaSoutheast AsiaThe Middle EastSouthern Africa
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on Worok is published.
Actor Details
Primary Name
Worok
Data Source
Precursor Intelligence