Skip to content

Spyware

ASPXSpy

ASPXSpy is an open-source web shell written in C# that allows a threat actor to accomplish various post-exploitation tasks, including file access and command execution.

ASPXSpy is a PHP spyware operated by APT39, APT41 and others.

Background

ASPXSpy is an open-source, C#-based web shell that enables a threat actor to carry out a range of post-exploitation activities, such as accessing files and running commands.


Source: Malpedia (Fraunhofer FKIE).