TeamSpy
Aliases: TVRAT, TVSPY, TeamViewerENT
- Malware type
- rat, spyware
- Family
- Malware family
- Last IoC activity
- 2026-07-22 01:18:54
- Profile updated
- 2026-07-07 14:53:31
Targeted industries: government-and-public-sector energy-and-utilities technology-and-telecommunications
Targeted regions: country_code:ua country_code:ru country_code:ge
Context
TeamSpy, also known as TVRAT or TeamViewerENT, is a remote access tool (RAT) that leverages TeamViewer to gain unauthorized access and control over a victim's system. Primarily used for espionage, it targets various industries, particularly in Eastern Europe.
Reports & references
- thedfirreport.com — Ursnif Via Lolbins (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Teamspy (report)
- Trend Micro — Unsupported Teamviewer Versions Exploited Backdoors Keylogging (report)
- cyber.nj.gov — Spy Agent (report)
- blog.avast.com — A Deeper Look Into Malware Abusing Teamviewer (report)
- deepinstinct.com — The Russian Spyagent A Decade Later And Rat Tools Remain At Risk (report)