SPECTRALVIPER Binary Execution

Ibrahim Saud@tektrix

•updated Jun 17, 2026•0•0•2

Detects the execution of the SPECTRALVIPER binary or script, a core backdoor component in the Miasma toolkit used for persistent remote access and command execution. This rule specifically looks for process creation events where the filename or command line contains 'spectralviper'.