New Windows SprySOCKS Backdoor Uses Kernel Drivers to Evade Detection (opens in new tab)

A sophisticated cyber‑espionage group has quietly expanded its toolkit with new Windows versions of its SprySOCKS backdoor. This malware leverages kernel-level drivers to operate in stealth, allowing attackers to maintain persistent access, conduct covert surveillance, and evade many traditional security defenses. ESET researchers identified two previously unknown Windows versions of the SprySOCKS backdoor, which had... The post appeared first on .