malware

ASPXSpy

S0073 · ATT&CK v19.2

aka ASPXTool

Platforms

Windows

Tracked actors

Description

[ASPXSpy](https://attack.mitre.org/software/S0073) is a Web shell. It has been modified by [Threat Group-3390](https://attack.mitre.org/groups/G0027) actors to create the ASPXTool version. (Citation: Dell TG-3390)

Actors that use this

2 tracked actors

Agrius (Agonizing Serpens / BlackShadow)ATT&CK-attributed

APT39 / ChaferATT&CK-attributed