Friday 26 June 2026 19:12:44 GMT+02:00
Netcrook
#SprySOCKS
Windows Learns a New Trick: SprySOCKS Reappears with Multiple C2 Paths
A long-running espionage backdoor has been observed in Windows form, with transport flexibility and kernel-level stealth that can complicate routine detection.
Windows Gains a New Silent Passenger: SprySOCKS Steps Into the Kernel
A backdoor long tied to Linux now has Windows builds, and one of them reportedly uses a kernel driver to hide itself from ordinary visibility tools.
SprySOCKS Lands on Windows, and Defender Assumptions Get Shaken
A backdoor once treated as Linux-only now appears in two Windows variants with hard-coded command-and-control settings and driver-based stealth, a combination that can complicate detection and analysis.
SprySOCKS Crosses the OS Divide, and Government Networks Feel the Pressure
A Linux-born backdoor has reappeared in Windows form, and the shift suggests a more portable, harder-to-trace malware toolkit aimed at public-sector targets.