Netskope Threat Labs

Spawnsnare

ATP Sandbox Adv. Heuristics

Spawnsnare is a utility written in C that targets Linux systems and can dump the uncompressed kernel image to a file and encrypt it with AES, without needing command line tools.

First seen
April 2025
Last seen
September 2026
Alert Name
Linux.Trojan.Spawnsnare