Netskope Threat Labs

Masepie

ATP Sandbox Adv. Heuristics

Masepie is a Python backdoor associated with the APT28 intrusion set, which authorities link to Russian military intelligence. It has appeared in campaigns against government and logistics organizations in Europe and the Caucasus, alongside APT28 tooling such as SteelHook and OceanMap.

First seen
January 2024
Last seen
October 2026
Alert Name
Script-Python.Backdoor.Masepie
Shortcut.Trojan.Masepie