ScreenCap
- First seen
- 2023-03-15 00:00:00
- Malware type
- keylogger, screen-capture, spyware
- Profile updated
- 2026-07-07 13:10:36
Targeted industries: technology-and-telecommunications
Targeted regions: country_code:ae country_code:il
Context
SentinelOne describes this malware as capable of doing screen capture and keylogging. It is uses by a threat cluster they named WIP19, targeting telecommunications and IT service providers in the Middle East and Asia.
Detection coverage
- 2 YARA rules
Detection rules
- SEKOIA_Apt_Windows_Wip19_Screencap (yara-rule)
- MALPEDIA_Win_Screencap_Auto (yara-rule)
Reports & references
- sentinelone.com — Wip19 Espionage New Chinese Apt Targets It Service Providers And Telcos With Signed Malware (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Screencap (report)