malware

CreepySnail

S1024 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[CreepySnail](https://attack.mitre.org/software/S1024) is a custom PowerShell implant that has been used by [POLONIUM](https://attack.mitre.org/groups/G1005) since at least 2022.(Citation: Microsoft POLONIUM June 2022)

Actors that use this

1 tracked actor

PoloniumATT&CK-attributed