← Back to Feed
FishMonger’s arsenal upgraded: SprySOCKS for Windows
June 16, 2026 · WeLiveSecurity · Severity: MEDIUM
ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness
Key Takeaways
- ESET researchers discovered SprySOCKS for Windows, a backdoor from the FishMonger threat actor that weaponizes a kernel driver for stealth.
- The upgraded SprySOCKS tooling expands FishMonger's arsenal with advanced Windows capabilities, including kernel driver weaponization.
- Defenders should watch for kernel driver abuse and SOCKS backdoors associated with FishMonger operations across Windows environments.