Skip to content
MalwareWiki

Malware

EYService

EYService is the main part of the backdoor used by Nazar APT.

EYService is a Windows malware family operated by Nazar.

Background

EYService forms the core component of the backdoor employed by the Nazar APT. It operates as a passive backdoor and depends on Microolap's Packet Sniffer SDK (PSSDK), which has since been discontinued.

Source: Malpedia (Fraunhofer FKIE).