Serpent
- Malware type
- backdoor
- Profile updated
- 2026-07-07 14:40:57
Targeted industries: government-and-public-sector manufacturing professional-services
Targeted regions: country_code:fr
Context
According to Proofpoint, this is a backdoor written in Python, used in attacks against French entities in the construction, real estate, and government industries.
Detection coverage
- 1 YARA rules
Detection rules
- SEKOIA_Win_Infostealer_Serpent_Strings (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Py.Serpent (report)
- bleepingcomputer.com — Serpent Malware Campaign Abuses Chocolatey Windows Package Manager (report)
- blogs.vmware.com — Serpent The Backdoor That Hides In Plain Sight (report)
- proofpoint.com — Serpent No Swiping New Backdoor Targets French Entities Unique Attack Chain (report)
- labs.k7computing.com — Uncovering The Serpent (report)