Snake Keylogger

Search IOCs, vulnerabilities, APT…

216.73.217.22

← Back to intrusion sets

· Published 21/12/2025 14:48 · Modified 21/12/2025 14:48 · Source: AlienVault

Essential information

Confidence: 100/100
Published: 21/12/2025 14:48
Modified: 21/12/2025 14:48
Updated at: 21/12/2025 14:48
Revoked: No
Author / Source: AlienVault
Resource level: —
Primary motivation: —
Related entities: 1 reports, 13 attack patterns (mitre), 1 malware, 1 sectors, 4 countries, 1 indicators, 4 vulnerabilities (cve)

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Applications of Snake Keylogger in Geopolitics: Abuse of …

13 MITREs 1 Malware 1 APT

Attack patterns (MITRE) (13)

T1574.002 uses

MITRE
T1566.001 uses

Spearphishing Attachment MITRE
T1082 uses

System Information Discovery MITRE
T1053.005 uses

Scheduled Task MITRE
T1012 uses

Query Registry MITRE
T1083 uses

File and Directory Discovery MITRE
T1059.003 uses

Windows Command Shell MITRE
T1033 uses

System Owner/User Discovery MITRE
T1114 uses

Email Collection MITRE
T1555 uses

Credentials from Password Stores MITRE
T1078 uses

Valid Accounts MITRE
T1005 uses

Data from Local System MITRE

← Previous

Page / 2

1–12 of 13

Snake Keylogger uses

Family

Sectors (1)

Energy targets

Countries (4)

Kazakhstan targets
Israel targets
Iran, Islamic Republic of targets
United States of America targets

Indicators (1)

f099cb320a26b6284e9ca24b352b19d2109bb3df0beeded3c34377c9b934ed3b indicates

stix 100/100

Win.Malware.Generic-10008460-0

· Valid until 27/06/2026 · Source: AlienVault

Vulnerabilities (CVE) (4)

CVE-2025-1661 targets

9.8 Critical

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, …

Attack vector: NETWORK
Published: 11/03/2025
Modified: 21/12/2025

Awaiting Analysis

CVE-2025-6554 KEV targets

8.1 High

Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML …

Attack vector: Network
Published: 02/07/2025
Modified: 21/12/2025

Received

CVE-2025-32463 KEV targets

9.3 Critical

Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) …

Attack vector: Local
Published: 29/09/2025
Modified: 27/05/2026