HyperSSL (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 19:47:34 UTC
2025-06-13 ⋅ Twitter (@Unit42_Intel) ⋅
Tweet about APT27 SysUpdate activity
HyperSSL HyperSSL 2023-07-18 ⋅ Mandiant ⋅ Mandiant Intelligence
Stealth Mode: Chinese Cyber Espionage Actors Continue to Evolve Tactics to Avoid Detection
BPFDoor SALTWATER SEASPY SideWalk ZuoRAT Daxin HyperBro HyperSSL Waterbear 2023-03-01 ⋅ Trend
Micro ⋅ Daniel Lunghi
Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting
HyperSSL HyperSSL 2022-11-22 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweets on SysUpdate / Soldier / HyperSSL
HyperSSL 2021-08-10 ⋅ FireEye ⋅ Israel Research Team, U.S. Threat Intel Team
UNC215: Spotlight on a Chinese Espionage Campaign in Israel
HyperBro HyperSSL MimiKatz 2021-06-02 ⋅ Trend Micro ⋅ Daniel Lunghi
Taking Advantage of PE Metadata, or How To Complete Your Favorite Threat Actor’s Sample Collection
HyperSSL 2021-06-02 ⋅ Trend Micro ⋅ Daniel Lunghi
Taking Advantage of PE Metadata,or How To Complete your Favorite ThreatActor’s Sample Collection (Paper)
HyperSSL 2021-04-29 ⋅ ESET Research ⋅ Andy Garth, Daniel Chromek, Matthieu Faou, Robert Lipovsky, Tony Anscombe
ESET Industry Report on Government: Targeted but not alone
Exaramel Crutch Exaramel HyperBro HyperSSL InvisiMole XDSpy 2021-04-09 ⋅ Trend Micro ⋅ Daniel Lunghi, Kenney
Lu
Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware
HyperBro HyperSSL APT27 2020-09-30 ⋅ Team Cymru ⋅ Jacomo Piccolini, James Shank
Pandamic: Emissary Pandas in the Middle East
HyperBro HyperSSL 2020-01-01 ⋅ FireEye ⋅ Mandiant, Mitchell Clarke, Tom Hall
Mandiant IR Grab Bag of Attacker Activity
TwoFace CHINACHOPPER HyperBro HyperSSL 2019-07-21 ⋅ One Night in Norfolk ⋅ Kevin Perlow
Emissary Panda DLL Backdoor
HyperSSL 2019-06-13 ⋅ ae CERT ⋅ ae CERT
Advanced Notification of Cyber Threats against Family of Malware Giving Remote Access to Computers
HyperBro HyperSSL 2019-05-28 ⋅ Palo Alto Networks Unit 42 ⋅ Robert Falcone, Tom Lancaster
Emissary Panda Attacks Middle East Government Sharepoint Servers
CHINACHOPPER HyperSSL
[TLP:WHITE] win_hyperssl_auto (20251219 | Detects win.hyperssl.)
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.hyperssl
https://malpedia.caad.fkie.fraunhofer.de/details/win.hyperssl
Page 1 of 1