Remote Access Trojan

Pupy

First seen: 2015-01 • Status: active

Currently Active Threat

Pupy is a Python hacking tool that works on Windows, Linux, and Mac. Iranian hackers have used it.

Overview

Pupy is a cross-platform Python RAT. It is used by both pen testers and nation-state actors like APT33.

Also Known As

Pupy RAT

How It Spreads

  • Targeted attacks

What It Does

  • Cross-platform RAT
  • Remote access

Is your business exposed?

Target Platforms

Windows, Linux, macOS

Detection Tips

  • Monitor for Python RAT activity

MITRE ATT&CK Techniques

T1219, T1059

If You're Infected

  1. 1.

    Full malware investigation

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required