Bvp47

First seen
2013-01-01 00:00:00
Malware type
backdoor
Family
Malware family
Profile updated
2026-07-07 14:23:09

Targeted industries: government-and-public-sector defense-and-aerospace

Targeted regions: country_code:cn country_code:us

Context

Pangu Lab discovered this backdoor during a forensic investigation in 2013. They refer to related incidents as "Operation Telescreen".

Reports & references

  • exatrack.com — Tricephalic Hellkeeper (report)
  • malpedia.caad.fkie.fraunhofer.de — Elf.Bvp47 (report)
  • bleepingcomputer.com — Nsa Linked Bvp47 Linux Backdoor Widely Undetected For 10 Years (report)
  • pangulab.cn — The Bvp47 A Top Tier Backdoor Of Us Nsa Equation Group (report)
  • thehackernews.com — Chinese Experts Uncover Details Of (report)
  • pangulab.cn — The Bvp47 A Top Tier Backdoor Of Us Nsa Equation Group Ii.En (report)
  • pangulab.cn — The Bvp47 A Top Tier Backdoor Of Us Nsa Equation Group.En (report)

External references