Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

Chinese SprySOCKS backdoor gains Windows driver stealth capability

Part of the SprySOCKS story · since 16 Jun

Quiet for 20 weekslast report 17 Jun4 articles4 outlets
16 Jun · The Hacker News first26 Aug19 Sep13 OctNowThis article1st of 4
  • Tue 16 Jun, 10:46 UTC. The Hacker News, first report. Chinese SprySOCKS backdoor gains Windows driver stealth capability. This article, 1st of 4.
  • Tue 16 Jun, 15:00 UTC. Infosecurity, its first report on the story. SprySOCKS backdoor gains Windows kernel stealth, hits governments.
  • Tue 16 Jun, 18:30 UTC. Dark Reading, its first report on the story. FishMonger uses new SprySOCKS backdoor with kernel drivers.
  • Wed 17 Jun, 08:28 UTC. Security Affairs, its first report on the story. China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hints.

The article discusses the expansion of the SprySOCKS backdoor associated with Chinese cyber espionage, now targeting Windows systems through driver-based stealth techniques. It highlights malware trends, the importance of cybersecurity measures, and ongoing risks posed by advanced persistent threats (APTs). The article emphasizes the significance of proactive defenses such as Zero Trust models amid the evolving threat landscape and recommends multiple resources for staying informed on cybersecurity strategies.

How the story developed

All 4 articles
Quiet for 20 weekslast report 17 Jun4 articles4 outlets

4 articles from 4 outlets since 16 Jun. Quiet since 17 Jun. This was the first report.

Now16 Jun161718191 Nov2First reportThe Hacker News · 16 Jun, 10:46
  • Tue 16 Jun, 10:46 UTC. The Hacker News, first report. Chinese SprySOCKS backdoor gains Windows driver stealth capability. This article, 1st of 4.
  • Tue 16 Jun, 15:00 UTC. Infosecurity, its first report on the story. SprySOCKS backdoor gains Windows kernel stealth, hits governments.
  • Tue 16 Jun, 18:30 UTC. Dark Reading, its first report on the story. FishMonger uses new SprySOCKS backdoor with kernel drivers.
  • Wed 17 Jun, 08:28 UTC. Security Affairs, its first report on the story. China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hints.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 4 articles as a list
  1. Tue 16 JunDay 03
    1. Chinese SprySOCKS backdoor gains Windows driver stealth capability10:46 · The Hacker News · First report · This article, 1st of 4
    2. SprySOCKS backdoor gains Windows kernel stealth, hits governments15:00 · Infosecurity
    3. FishMonger uses new SprySOCKS backdoor with kernel drivers18:30 · Dark Reading
  2. Wed 17 JunDay 11
    1. China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth and UEFI Bootkit Hints08:28 · Security Affairs

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in