WINDOWS VARIANT OF SPRYOCKS MALWARE TARGETS GOVERNMENT ORGANIZATIONS

Security researchers discovered Windows variants of SprySOCKS being used in coordinated attacks on government entities. The malware, previously known for targeting Linux systems, now poses a dual-platform threat. SprySOCKS functions as a backdoor, enabling attackers to establish remote access and maintain persistence on compromised systems. The Windows adaptation suggests the threat actors behind the malware are expanding their operational scope and targeting organizations running diverse infrastructure environments. The attacks span at least four countries, indicating either a sophisticated threat group or shared tooling among multiple actors. Government organizations typically represent high-value targets due to their access to sensitive data and critical systems. The discovery highlights the ongoing evolution of cross-platform malware and the need for organizations to maintain robust security monitoring across all operating systems. Defenders should monitor for SprySOCKS indicators of compromise on both Linux and Windows endpoints and apply relevant patches and security updates.