Sasfis (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 13:39:43 UTC Sasfis acts mostly as a downloader that has been observed to download Asprox and FakeAV. According to a VirusBulletin article from 2012, it is likely authored by the same group as SmokeLoader. [TLP:WHITE] win_sasfis_auto (20251219 | Detects win.sasfis.) Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.sasfis https://malpedia.caad.fkie.fraunhofer.de/details/win.sasfis Page 1 of 1