PseudoManuscrypt
- Malware type
- spyware
- Family
- Malware family
- Profile updated
- 2026-07-07 14:48:28
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
According to PCrisk, PseudoManuscrypt is the name of the malware that spies on victims. It is similar to another malware called Manuscrypt. We have discovered PseudoManuscrypt while checking installers for pirated software (one of the examples is a fake pirated installer for SolarWinds - a network monitoring software).
Detection coverage
- 1 YARA rules
Detection rules
- ARKBIRD_SOLG_MAL_Pseudomanuscrypt_Dec_2021_1 (yara-rule)
Reports & references
- youtube.com — Watch (report)
- Kaspersky — 107498 (report)
- asec.ahnlab.com — 31683 (report)
- medium.com — Updates From The Maas New Threats Delivered Through Nullmixer D45Defc260D1 (report)
- bitsight.com — Zero 50K Infections Pseudomanuscrypt Sinkholing Part 1 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Pseudo Manuscrypt (report)
- ics-cert.kaspersky.com — Pseudomanuscrypt A Mass Scale Spyware Attack Campaign (report)
- netresec.com (report)