Skip to content

Spyware

GoldenSpy

According securityweek, GoldenSpy, the malware was observed as part of a campaign that supposedly started in April 2020, but some of the identified samples suggest the threat has been around since at

GoldenSpy is a Windows spyware.

Background

SecurityWeek reports that GoldenSpy appeared in a campaign thought to have begun in April 2020, though certain samples indicate the threat may date back to at least December 2016. One affected victim, a global technology vendor doing government work in the US, Australia, and UK that had recently established a presence in China, was compromised after installing "Intelligent Tax," software from Aisino Corporation's Golden Tax Department that a local bank mandated for paying local taxes. The program functioned as promised, but it was also found to install a concealed backdoor letting remote operators run Windows commands or upload and execute files.


Source: Malpedia (Fraunhofer FKIE).