Description
Speculoos is a backdoor that the APT41 intrusion set used in a global intrusion campaign that exploited multiple vulnerabilities at once. Researchers documented its use against organizations worldwide, and its deployment alongside other APT41 tooling marked one of the group's most aggressive campaigns.
Stats
- First seen
- May 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Linux.Backdoor.Speculoos |
| Trojan.Speculoos.A |
| Trojan.Speculoos.B |