S1163 SnappyTCP

malwareEnterprise

platformsLinux

also known asSnappyTCP

SnappyTCP is a web shell used by Sea Turtle between 2021 and 2023 against multiple victims. SnappyTCP appears to be based on a public GitHub project that has since been removed from the code-sharing site. SnappyTCP includes a simple reverse TCP shell for Linux and Unix environments with basic command and control capabilities.

techniques used (5)

ATT&CK techniques this enables or maps to.

T1059.004Unix Shell
T1071.001Web Protocols
T1095Non-Application Layer Protocol
T1505.003Web Shell
T1573.002Asymmetric Cryptography

used by groups (1)

Threat groups associated with this.

G1041Sea Turtle

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan