Description
Hupigon is a backdoor that provides cyberattackers with extensive remote access to infected Windows systems, including keystroke logging, screen capture, and file management. The family originated in Chinese speaking criminal markets and spread through bundled installers and trojanized applications. Its long history produced many variants, and its server side tooling made it a common choice for operators who wanted turnkey remote control.
Stats
- First seen
- February 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Backdoor.Hupigon.128056 |
| Backdoor.Hupigon.137755 |
| Backdoor.Hupigon.149241 |
| Backdoor.Hupigon.176740 |
| Backdoor.Hupigon.212953 |
| Backdoor.Hupigon.213905 |
| Backdoor.Hupigon.254501 |
| Backdoor.Hupigon.273549 |
| Backdoor.Hupigon.AAAH |
| Backdoor.Hupigon.AAEA |