Skipper

Aliases: Kotel

First seen
2013-11-01 00:00:00
Malware type
downloader, backdoor
Family
Malware family
Profile updated
2026-07-07 12:41:48

Targeted industries: government-and-public-sector financial-services

Context

Skipper, also known as Kotel, is a versatile malware family primarily used as a downloader with backdoor capabilities. It traditionally targets government and financial sectors, enabling attackers to download additional malicious payloads onto infected systems.

Reports & references

  • CrowdStrike — Report2020Crowdstrikeglobalthreatreport (report)
  • secureworks.com — Iron Hunter (report)
  • pwc.co.uk — Cyber Threats 2019 Retrospect (report)
  • Kaspersky — 88069 (report)
  • pdfhost.io — F0@Qelmu2 Macprostorage 2017Finalbitdefenderwhitepapernetrepsera4En Enbitdefenderwhitepapernetrepsera4En Enindd (report)
  • ESET — Turlas Watering Hole Campaign Updated Firefox Extension Abusing Instagram (report)
  • ESET — Tracking Turla New Backdoor Armenian Watering Holes (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Skipper (report)
  • blog.telsy.com — Following The Turlas Skipper Over The Ocean Of Cyber Operations (report)
  • download.bitdefender.com — Bitdefender Whitepaper Pac A4 En En1 (report)

External references