Spook
- Malware type
- rat
- Family
- Malware family
- Profile updated
- 2026-07-07 13:50:42
Targeted industries: government-and-public-sector defense-and-aerospace
Context
Spook is a sophisticated remote access tool often used in cyber espionage campaigns. It primarily targets government and defense sectors for intelligence gathering.
Detection coverage
- 1 YARA rules
Detection rules
- DITEKSHEN_MALWARE_Win_Thanos (yara-rule)
Reports & references
- ransomlook.io — Spook (report)