The Raspberry Robin worm is becoming an access-as-a-service malware for deploying other payloads, includingIcedID,Bumblebee,TrueBot(aka Silence), andClop ransomware. It is “part of a complex and interconnected malware ecosystem, with links to other malware families and alternate infection methods beyond its original USB drive spread,” the Microsoft Security Threat Intelligence Center (MSTIC