ElectricFish.Tunneling.Tool

description-logoDescription

This indicates an attempt to use ElectricFish tunneling tool.
ElectricFish is a malicious Windows executable that's related to Hidden Cobra - North Korean Malicious Cyber Activity. This application's primary purpose is to tunnel traffic between two IP addresses.

affected-products-logoAffected Products

Any unprotected Windows system is vulnerable.

Impact logoImpact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems

recomended-action-logoRecommended Actions

The signature can be set to "Block" to block the malware's communication.
Please use Anti-Virus software to scan and clean the computer.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-09-26 14.695 Sig Added
2019-05-31 14.624 Default_action:pass:drop
2019-05-14 14.613