SysKit

Aliases: IvizTech, MANGOPUNCH

First seen
2019-05-10 00:00:00
Malware type
backdoor, spyware
Family
Malware family
Profile updated
2026-07-07 12:57:06

Targeted industries: government-and-public-sector defense-and-aerospace

Targeted regions: country_code:us

Context

SysKit is an advanced spyware and backdoor malware used primarily for cyber-espionage. It targets government and defense sectors, with indications of state sponsorship.

Reports & references

  • Broadcom/Symantec — Tortoiseshell Apt Supply Chain (report)
  • darkreading.com — 1335897 (report)
  • proofpoint.com — I Knew You Were Trouble Ta456 Targets Defense Contractor Alluring Social Media (report)
  • Cisco Talos — Tortoiseshell Fake Veterans (report)
  • about.fb.com — Taking Action Against Hackers In Iran (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Syskit (report)
  • twitter.com — 1176861114535165952 (report)

External references