Skip to content
MalwareWiki

Malware

CROSSWALK

aka ProxIP · Motnug · TOMMYGUN

According to FireEye, CROSSWALK is a skeletal, modular backdoor capable of system survey and adding modules in response to C&C replies.

CROSSWALK, also known as ProxIP, Motnug, TOMMYGUN, is a Windows malware family operated by APT41.

Background

FireEye describes CROSSWALK as a bare-bones, modular backdoor that can perform system reconnaissance and load additional modules based on responses from its C&C.

Source: Malpedia (Fraunhofer FKIE).