SprySOCKS Windows Backdoor Uses Kernel Driver to Hide Processes, Files, and Network Traffic

Windows variants of SprySOCKS, a backdoor long associated with FishMonger (aka Earth Lusca/TAG-22), expanding a toolset that was until now Linux-only. The two Windows builds internally labelled WIN_DRV and WIN_PLUS preserve the original SprySOCKS protocol and command set while adding Windows-native loading techniques and, in WIN_DRV’s case, a kernel-mode driver that substantially increases stealth and […]

The post SprySOCKS Windows Backdoor Uses Kernel Driver to Hide Processes, Files, and Network Traffic appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.