Sync-Scheduler
- Malware type
- spyware, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 15:22:02
Targeted industries: professional-services technology-and-telecommunications
Context
According to Cyfirma, Sync-Scheduler is a dedicated document stealer that targets Word documents, Excel Spreadsheets, PowerPoint presentations, PDFs and ZIP compress files. The malware is written in C++ and equipped with anti-analysis and defense evasion techniques. It uses obfuscation in its code and terminates itself if it detects an analysis environment.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Sync Scheduler (report)
- cyfirma.com — Sync Scheduler A Dedicated Document Stealer (report)
- blogs.blackberry.com — Suspected Nation State Adversary Targets Pakistan Navy In Cyber Espionage Campaign (report)