HOMETHREATSsykipot
APT / THREAT GROUP

sykipot

4
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.sykipot

Threat Analysis

sykipot is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.trendmicro.com/trendlabs-security-intelligence/sykipot-now-targeting-us-civil-aviation-sector-information/
→https://community.rsa.com/thread/185437
→https://documents.trendmicro.com/assets/wp/wp-detecting-apt-activity-with-network-traffic-analysis.pdf
→https://web.archive.org/web/20200509171721/https://raw.githubusercontent.com/fdiskyou/threat-INTel/master/2015/GlobalThreatIntelReport.pdf
→https://www.alienvault.com/blogs/labs-research/sykipot-is-back

Quick Facts

TypeAPT / Threat Group
Aliases4

Also Known As

Wkysolsykipotgetkyswin.sykipot

External Intelligence

Malpedia: win.sykipot

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search sykipot