Malware
PipeSnoop
- First Reported
- Sep 19, 2023
- Latest Reported
- Feb 6, 2024
Reported Context (2)
- Malware Used: ShroudedSnooper has used two backdoors, HTTPSnoop and PipeSnoop. Talos' report indicates that the group targets public-facing servers and attempts to evade defenses by spoofing Microsoft Exchange Web Overview Highlights State-Linked Cyber Threat Groups, Targets and Tools
- We also discovered a sister implant to “HTTPSnoop” we’re naming “PipeSnoop,” which can accept arbitrary shellcode from a named pipe and execute it on the infected endpoint. ShroudedSnooper Targets Middle East Telecoms with HTTPSnoop and PipeSnoop Backdoors
Malware (21)
People (5)
Threat Actors (29)
MITRE ATT&CK (4)
Vendors (8)
Products (12)
Tools (7)
Industries (12)
Countries (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.