SNEEPY

Aliases: ByeByeShell

Malware type
webshell
Profile updated
2026-07-07 14:54:36

Targeted industries: technology-and-telecommunications government-and-public-sector

Context

SNEEPY, also known as ByeByeShell, is a web shell used for remote access and control of compromised servers. It is typically employed in cyber espionage campaigns to maintain persistent access to targeted networks.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Sneepy_Auto (yara-rule)

Reports & references

  • researchcenter.paloaltonetworks.com — Unit42 Confucius Says Malware Families Get Further By Abusing Legitimate Websites (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Sneepy (report)

External references