Netskope Threat Labs

Cyclops

ATP Sandbox Adv. Heuristics

Cyclops is a malware platform written in Go that researchers first observed in late 2023 and believe operators deployed against Middle Eastern targets in 2024. It gives operators arbitrary command execution on target file systems, supports pivoting inside infected networks, and operators control it through an HTTP REST API exposed within an SSH tunnel.

First seen
August 2023
Last seen
October 2026
Alert Name
Win64.Ransomware.Cyclops