Description
Zpevdo is a trojan that spreads through removable drives, copying itself to shared and portable storage so that infections move between systems without network delivery. Its worm like behavior makes shared workstations and transferred media the main infection vectors, and it can carry additional payloads as it propagates. Detections under this name call for cleaning the host and auditing every connected storage device.
Stats
- First seen
- March 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Trojan.Zpevdo |
| Document-Office.Trojan.Zpevdo |
| DOS.Trojan.Zpevdo |
| Script-BAT.Trojan.Zpevdo |
| Script-JS.Trojan.Zpevdo |
| Script-Macro.Trojan.Zpevdo |
| Script-PowerShell.Trojan.Zpevdo |
| Script.Trojan.Zpevdo |
| Unix.Trojan.Zpevdo |
| Win32.Trojan.Zpevdo |