Trusted Design

Malware leverages Windows Management Instrumentation (WMI)

概要

Malware leverages Windows Management Instrumentation (WMI) team described a novel persistence mechanism that leverages the Windows Management Instrumentation (WMI) toolset. In that incident, a Windows 2003 server contained unidentified malware, possibly a variant of the StartPage trojan. After developing countermeasures for the persistence mechanism, CTU researchers discovered additional infections on client environments using the Advanced Endpoint Threat Detection - Red Cloak(TM) platform. The discovery of more widespread use highlights the advantages of leveraging knowledge gained during a response engagement to quickly deploy protections across all client networks.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Stegoloader: A Stealthy Information Stealer (score: 0.69)
• Aggressive Malware Pushers: Prolific Cyber Surfers Beware (score: 0.65)
• TrendLabs: Spam Campaign Delivers Cross-platform Remote Access Trojan Adwind (score: 0.64)
• Malware Meets SysAdmin – Automation Tools Gone Bad (score: 0.63)
• Adwind: another payload for botnet-based malspam (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る