Skip to content
MalwareWiki

Malware

HTTPSnoop

aka TOFULOAD

Cisco Talos states that HTTPSnoop is a simple, yet effective, backdoor that consists of novel techniques to interface with Windows HTTP kernel drivers and devices to listen to incoming requests for sp

HTTPSnoop, also known as TOFULOAD, is a Windows malware family.

Background

According to Cisco Talos, HTTPSnoop is a straightforward but capable backdoor that uses novel methods to hook into Windows HTTP kernel drivers and devices, monitoring incoming requests aimed at particular HTTP(S) URLs and running the supplied content on the compromised endpoint.

Source: Malpedia (Fraunhofer FKIE).