FPSpy

First seen
2021-05-20 00:00:00
Malware type
spyware, backdoor
Profile updated
2026-07-07 12:51:46

Targeted industries: government-and-public-sector technology-and-telecommunications financial-services

Targeted regions: country_code:us country_code:ru country_code:cn

Context

FPSpy is a sophisticated spyware used for cyber-espionage, primarily targeting government, telecommunication, and financial sectors. It is known for its data exfiltration capabilities and backdoor functionality.

Detection coverage

  • 1 YARA rules

Detection rules

  • SEKOIA_Apt_Kimsuky_Fpspy (yara-rule)

Reports & references

  • Palo Alto Unit 42 — Kimsuky New Keylogger Backdoor Variant (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Fpspy (report)

External references