Description
Sprysocks is a backdoor originally developed for Linux and later ported to Windows, with code based on the open source Trochilus RAT. It supports TCP, UDP, and WebSocket command channels and more than 30 commands covering system information collection, process and service control, file management, keylogging, and SOCKS proxying, and its Windows variant uses a custom kernel driver to hide its presence and divert network traffic.
Stats
- First seen
- June 2024
- Last seen
- October 2026
Also known as
SprySOCKS
Alert name variants
| Alert Name |
|---|
| Linux.Backdoor.Sprysocks |
| Trojan.SprySOCKS.2 |
| Win64.Trojan.SprySOCKS |