Skip to content

Malware

PipeSnoop

aka TOFUPIPE

Cisco Talos states that PipeSnoop can accept arbitrary shellcode from a named pipe and execute it on the infected endpoint.

PipeSnoop, also known as TOFUPIPE, is a Windows malware family.

Background

Per Cisco Talos, PipeSnoop reads arbitrary shellcode from a named pipe and runs it on the compromised endpoint.


Source: Malpedia (Fraunhofer FKIE).