CTIPilot
AI-generated · no human review · verify critical claims against the linked source. how it works →

FishMonger Windows SprySOCKS campaign

campaign · campaign:fishmonger-isoon-sprysocks-windows-kernel-rootkit

FishMonger (I-SOON) ports the SprySOCKS backdoor to Windows (WIN_DRV / WIN_PLUS) with a kernel-driver rootkit; government targets.

Coverage
0
first 2026-06-17 → last –
no data
Latest activity
–
no entry about it yet
Peak priority
·
no entry about it yet
Targets
·
no sector or region stated
Sources cited
0
0 hosts

Relationships explore in graph

Typed, source-stated connections from the entity registry; each edge cites the entry whose reporting establishes it.

attributed to

Story timeline

No published entries reference this entity yet.

Entries about FishMonger Windows SprySOCKS campaign

No published entry is about this entity yet · an entry attaches by registry key, by the entity's name or a public alias in its title or body, or (for CVE entities) by exact CVE id.