ISMAgent
- First seen
- 2018-05-01 00:00:00
- Malware type
- spyware
- Family
- Malware family
- Profile updated
- 2026-07-07 12:49:06
Context
ISMAgent is a piece of spying software designed to exfiltrate data from infected systems. It's primarily used by threat actors for espionage activities.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Ismagent_Auto (yara-rule)
Reports & references
- Palo Alto Unit 42 — Evasive Serpens (report)
- cyware.com — Apt34 The Helix Kitten Cybercriminal Group Loves To Meow Middle Eastern And International Organizations 48Ae (report)
- Palo Alto Unit 42 — Dns Tunneling In The Wild Overview Of Oilrigs Dns Tunneling (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Ismagent (report)
- Broadcom/Symantec — Greenbug Espionage Telco South Asia (report)
- clearskysec.com — Ismagent (report)