threat-intel
Windows version of SprySOCKS Linux malware used to attack govt orgs
High
Summary
Windows variants of the SprySOCKS Linux malware, previously linked to the Earth Lusca threat actor, have been used to target government organizations in Taiwan, Thailand, Pakistan, and Honduras. These variants offer advanced stealth capabilities, including kernel-level hiding and traffic redirection, and pose a significant risk due to their ability to operate as both a client and server. The discovery highlights the evolving tactics of Earth Lusca and the need for robust defenses.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data