Cloud Snooper
Aliases: Snoopy
- First seen
- 2020-02-01 00:00:00
- Malware type
- backdoor
- Profile updated
- 2026-07-07 12:59:18
Targeted industries: technology-and-telecommunications government-and-public-sector
Targeted regions: country_code:us country_code:bd country_code:jp
Context
Cloud Snooper is a sophisticated malware that uses a unique technique to bypass firewall restrictions and help its operators control infected systems. It employs a Linux-based backdoor capable of covert command execution through HTTP and HTTPS traffic, targeting systems within technology and government sectors.
Reports & references
- intezer.com — Top Linux Cloud Threats Of 2020 (report)
- intezer.com — Elf Malware Analysis 101 Linux Threats No Longer An Afterthought (report)
- news.sophos.com — Cloudsnooper Report (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Cloud Snooper (report)
- sophos.com — Sophoslabs Cloud Snooper Report (report)
- Kaspersky — 98440 (report)