SocketPlayer
- First seen
- 2022-07-15 00:00:00
- Malware type
- rat, downloader
- Family
- Malware family
- Profile updated
- 2026-07-07 15:41:55
Targeted industries: government-and-public-sector technology-and-telecommunications financial-services
Context
The RAT is written in .NET, it uses socket.io for communication. Currently there are two variants of the malware, the 1st variant is a typical downloader whereas the 2nd one has download and C2 functionalities.
Reports & references
- file.gdatasoftware.com — G Data Socketplayer Analysis (report)
- volon.io — Targeted Attack On Indian Defense Officials Using Socketplayer Malware (report)