Netskope Threat Labs

ElectricFish

ATP Sandbox Adv. Heuristics

ElectricFish is a command line utility that tunnels traffic between two IP addresses, establishing TCP sessions to a source and a destination and relaying traffic between them through a custom protocol. It supports proxy authentication, which lets it reach destinations that require a proxy server.

First seen
February 2022
Last seen
October 2026
Electricfish
Alert Name
Win32.Trojan.Electricfish
Win32.Trojan.ElectricFish