Netskope Threat Labs

SnakeKeylogger

ATP Sandbox Adv. Heuristics

Description

SnakeKeylogger is a .NET based keylogger and information stealer sold on underground forums that captures keystrokes, clipboard data, and saved passwords from infected systems. It reaches victims through phishing emails with malicious attachments, and stolen data uploads to panels its buyers control. Its long market presence, frequent updates, and low price have made it a persistent commodity threat that appears in countless campaigns.

Stats

First seen
May 2022
Last seen
October 2026

Also known as

SnakeKeyLoggerSnakekeyLoggerSnakekeylogger

Alert name variants

Alert Name
ByteCode-MSIL.Backdoor.Snakekeylogger
ByteCode-MSIL.Spyware.Snakekeylogger
ByteCode-MSIL.Trojan.Snakekeylogger
ByteCode-MSIL.Trojan.SnakekeyLogger
ByteCode-MSIL.Trojan.SnakeKeylogger
ByteCode-MSIL.Trojan.SnakeKeyLogger
Document-Excel.Trojan.Snakekeylogger
Document-HTML.Trojan.Snakekeylogger
Document-PDF.Trojan.Snakekeylogger
Document-Word.Trojan.Snakekeylogger

Related families

BulzConvagentJalapenoMalgentMultiverze

References