ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > List all groups > List all tools > List all groups using tool SlowStepper

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: SlowStepper

NamesSlowStepper
CategoryMalware
TypeBackdoor
Description(ESET) SlowStepper is a backdoor developed in C++ with extensive use of object-oriented programming in the C&C communications code. Although the code contains hundreds of functions, the particular variant used in the supply-chain compromise of the IPany VPN software appears to be version 0.2.10 Lite, according to the backdoor’s code. The so-called “Lite” version indeed contains fewer features than other previous and newer versions.
Information<https://www.welivesecurity.com/en/eset-research/plushdaemon-compromises-supply-chain-korean-vpn-service/>

Last change to this tool card: 22 February 2025

Download this tool card in JSON format

All groups using tool SlowStepper

ChangedNameCountryObserved

APT groups

XPlushDaemonChina2019 

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]