# \#sockstroy

**URL:** https://community.emergingthreats.net/tag/sockstroy/4.md

[Latest](https://community.emergingthreats.net/latest.md) · [Categories](https://community.emergingthreats.net/categories.md) · [Tags](https://community.emergingthreats.net/tags.md)

---

## [SocksTroy - An interesting use case with byte\_jump, isdataat, and stream\_size](https://community.emergingthreats.net/t/sockstroy-an-interesting-use-case-with-byte-jump-isdataat-and-stream-size/210)

<div class="topic-metadata">

**Author:** [@trobinson667](https://community.emergingthreats.net/u/trobinson667)\
**Replies:** 0\
**Last updated:** [December 16, 2022, 11:12pm UTC](https://community.emergingthreats.net/t/sockstroy-an-interesting-use-case-with-byte-jump-isdataat-and-stream-size/210 "2022-12-16T23:12:39Z")

</div>

What is SocksTroy? Hey Folks, A while back, we got a notification from @jaydinbas about a new type of backdoor proxy discovered in the wild. We chose to name it SocksTroy after the name discovered in its PDB metadata. A…