ESET researchers have identified two new Windows variants of the SprySOCKS backdoor, previously exclusive to Linux, attributed to the Chinese cyberespionage group FishMonger. The variants, labeled WIN_DRV and WIN_PLUS,…
12 articles · Updated June 16, 2026
Recent Intelligence Reports
Fishmongers Arsenal Upgraded Sprysocks Windows— www.welivesecurity.com · June 19, 2026
China-Linked FishMonger Ports SprySOCKS to Windows With Kernel— Securityaffairs.Co · June 17, 2026
Advanced Kernel— Rescana · June 17, 2026
SprySOCKS backdoor expands to Windows with new variants— Feeds.Feedburner · June 16, 2026
SprySOCKS Windows Variant Abuses Kernel Drivers to Evade Detection— Darkreading · June 16, 2026
SprySOCKS Backdoor Expands From Linux to Windows— Infosecurity-Magazine · June 16, 2026
ESET Research: China-aligned FishMonger updates its arsenal, targets governments in ...— Markets.Businessinsider · June 16, 2026
Windows version of SprySOCKS Linux malware used to attack govt orgs— Bleepingcomputer · June 16, 2026