ASPXSpy — Malware Profile

ASPXSpy is a Web shell. It has been modified by Threat Group-3390 actors to create the ASPXTool version.

MITRE ATT&CK techniques (1)

• T1505.003 Web Shell

IntelFusions coverage

• APT39: Iran's Personal Data Harvesting Machine Targets Telecom and Travel Industries for Surveillance Operations 2026-02-16

Attributed threat actors

• APT27
• HAFNIUM
• APT39
• APT41
• Agrius

Read the full analysis on IntelFusions