Micropsia

Description

Micropsia is a Delphi malware family created by an APT group known as Arid Viper that aims to steal sensitive information and provide remote access. It reaches victims through phishing lures that deliver installers masquerading as legitimate applications, and it collects files, credentials, and device information for its operators. The family's long campaign history centers on targets in the Middle East, and its operators continually refresh their lures and infrastructure.

Stats

First seen: May 2022
Last seen: September 2026

MITRE ATT&CK techniques

16 techniques across 6 tactics.

TA0002 Execution

T1047Windows Management Instrumentation
T1059Command and Scripting Interpreter
- T1059.003Windows Command Shell

TA0003 Persistence

T1547Boot or Logon Autostart Execution
- T1547.009Shortcut Modification

TA0005 Stealth

T1027Obfuscated Files or Information
- T1027.013Encrypted/Encoded File
T1564Hide Artifacts
- T1564.001Hidden Files and Directories

TA0007 Discovery

T1033System Owner/User Discovery
T1082System Information Discovery
T1083File and Directory Discovery
T1518Software Discovery
- T1518.001Security Software Discovery

TA0009 Collection

T1056Input Capture
- T1056.001Keylogging
T1113Screen Capture
T1119Automated Collection
T1123Audio Capture
T1560Archive Collected Data
- T1560.001Archive via Utility

TA0011 Command and Control

T1071Application Layer Protocol
- T1071.001Web Protocols
T1105Ingress Tool Transfer

Associated groups

G1028APT-C-23

Alert name variants

Alert Name	Engine
Android.Trojan.Micropsia	ATP Sandbox Adv. Heuristics
Win32.Backdoor.Micropsia	ATP Sandbox Adv. Heuristics
Win32.Trojan.Micropsia	ATP Sandbox Adv. Heuristics
Win64.Backdoor.Micropsia	ATP Sandbox Adv. Heuristics
Win64.Trojan.Micropsia	ATP Sandbox Adv. Heuristics

Related families

InvisiMole Empire Metamorfo Bazar DarkGate