Icesword

Malware type
webshell
Profile updated
2026-07-07 14:24:53

Context

Icesword is a type of webshell known for providing attackers with remote access to compromised web servers. It allows unauthorized execution of commands and can be used to maintain persistent control over compromised systems.

Detection coverage

  • 1 YARA rules

Detection rules

  • SEKOIA_Webshell_Icesword_Strings (yara-rule)

Reports & references

  • ESET — Unveiling Wolfsbane Gelsemiums Linux Counterpart To Gelsevirine (report)
  • malpedia.caad.fkie.fraunhofer.de — Jsp.Icesword (report)

External references