Loading malware…
Amaq Finder is a malware/tool name referenced in reporting on Iranian cyber capability through March 2026. It is mentioned as a newer addition alongside Rugissement and is also listed in malware/IOC hash material. The provided content does not include verified technical details on its functionality, infection vector, persistence, command-and-control, targeted platforms, associated threat actor, victimology, or specific indicators of compromise beyond the name appearing in IOC/hash listings. Based on the available content, the only high-confidence characterization is that Amaq Finder is tracked as malware or a malicious tool observed in the Iranian threat reporting corpus.
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.