APT / THREAT GROUP

Pitou

aliases

Last seen:Mar 17, 2026

Intelligence Profile

According to TG Soft, Pitou has beeen released on April 2014. It maybe an evolution of the rootkit "Srzizbi" developed on 2008. Pitou is a spambot, the main goal is send spam form the computer of victim.

Threat Analysis

Pitou is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.565.9211&rep=rep1&type=pdf

→https://isc.sans.edu/diary/rss/25068

→https://johannesbader.ch/2019/07/the-dga-of-pitou/

→https://www.f-secure.com/documents/996508/1030745/pitou_whitepaper.pdf

→https://www.tgsoft.it/english/news_archivio_eng.asp?id=884

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

win.pitouPitou

External Intelligence

Malpedia: win.pitou

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Pitou