Pyarmor

Reported Context (1)

also observed another tool, named PyGRPC, which was a compiled Python reverse SOCKS proxy, protected by Pyarmor. This proxy communicates with the C2 server using gRPC over TLS like the Pet and Kind backdoor variants. ThreatLabz Details Teams Vishing Campaign Deploying GoGRPC Backdoors and SOCKS Proxies

Malware (10)

MITRE ATT&CK (13)

Vendors (1)

Products (4)

Tools (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.