Updated:10:45 PM CEST Sep,22
(new)
(c) 1998-2026 Gameguru Mania
Privacy Policy statement
|
TASK#STOMP Backdoor Steals Docs and Wi-Fi Keys - tech|
| (hx) 10:25 PM CEST - Sep,22 2026 | Securonix researchers disclosed TASK#STOMP on September 21, 2026, a Windows PowerShell backdoor built for long-term theft, not smash-and-grab damage. It hunts Word, PDF, PowerPoint, Excel, and archive files, then also grabs saved Wi-Fi passwords, clipboard text, and screenshots. The malware plants five persistence hooks—four scheduled tasks plus a Startup-folder copy - so deleting one copy may not clear the infection.
Securonix decoded two failover command servers and confirmed remote command execution, but it analyzed a single machine and did not name a threat group. How the first script lands on a desktop is still unconfirmed. There is no patch: this is abuse of built-in Windows tools, so defenders need to hunt the persistence and block the published C2 domains.
|
|
last 10 comments: All comments
|
|
Add your comment (free registration required)