Yasso
- Malware type
- webshell
- Family
- Malware family
- Profile updated
- 2026-07-07 13:09:48
Context
According to Palo Alto Networks, Yasso is an open source multi-platform intranet-assisted penetration toolset that brings together a number of features such as scanning, brute forcing, remote interactive shell, and running arbitrary commands. It is authored by a Mandarin-speaking pentester nicknamed Sairson.
Detection coverage
- 1 YARA rules
Detection rules
- SEKOIA_Tool_Yasso_Strings (yara-rule)
Reports & references
- paloaltonetworks.com — Through The Cortex Xdr Lens Uncovering A New Activity Group Targeting Governments In The Middle East And Africa (report)
- nattothoughts.substack.com — Reconnaissance Scanning Tools Used (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Yasso (report)