China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-16 09:44 UTC
  • Importiert: 2026-06-24 08:33 UTC
  • Quelle-ID: thn_global
  • uid_hash: 3aaee014bbe00639d6897a9bb944fdaf5beafbafc70d6c302c86e5a0f5edec1b

Inhalt

Cybersecurity researchers have flagged two previously undocumented Windows variants of what was believed to be a Linux-only backdoor called SprySOCKS.

"The Windows variants discovered are internally marked as WIN_DRV and WIN_PLUS," ESET said in a report shared with The Hacker News. "Both come with a hard-coded C&C [command-and-control] configuration and support communication over TCP, UDP,

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews