SLEEPWALKER Backdoor: A Stealthy Windows Implant Triggered by a Single Network Packet
A newly documented Windows backdoor named SLEEPWALKER has been detailed by independent malware researcher Dominik Reichel. The implant remains dormant in memory…
Tag: VMCI
UNC3886: Use of VMCI Sockets for Persistence
UNC3886 is a threat group documented by Mandiant that used VMware VMCI sockets for persistence between compromised ESXi hosts and guest VMs.…
Mandiant: Documentation of UNC3886’s VMCI Use
Mandiant is a cybersecurity company that documented UNC3886's use of VMware VMCI sockets for persistence between ESXi hosts and guest VMs, a…