Skip to content

Malware

SnappyTCP

According to PwC, SnappyTCP is a simple reverse shell for Linux/Unix systems, with variants for plaintext and TLS communication.

SnappyTCP is a Linux malware family operated by Sea Turtle.

Background

PwC reports that SnappyTCP is a basic reverse shell targeting Linux/Unix systems, offered in both plaintext and TLS communication variants. SeaTurtle is known to have deployed SnappyTCP at least from 2021 through 2023.


Source: Malpedia (Fraunhofer FKIE).