FishMonger Uses TCP, UDP, and WebSocket C2 Channels in SprySOCKS Windows Attacks
Wed Jun 17 2026
Malware
cyberpress.org
Cybersecurity researchers at ESET have uncovered a major shift in the tactics of FishMonger, a Chinese cyberespionage group linked to the contractor I-SOON. The threat actors have developed two previously undocumented Windows versions of SprySOCKS, a backdoor previously thought to only target Linux systems. Telemetry data from 2023 and 2024 reveals that these new attacks […]
The post FishMonger Uses TCP, UDP, and WebSocket C2 Channels in SprySOCKS Windows Attacks appeared first on Cyber Security News.