security2 publishers
TASK#STOMP plants five persistence footholds from a single desktop VBScript
Securonix pulled four scheduled tasks and a Startup folder copy out of one infected machine, and the two PowerShell modules restart each other. Delete the desktop script and the backdoor keeps collecting documents.
Reality
- Evidence58
- Adoption12
- Hype gap+8
- Incentives62
- Confidence64