As cited
Copy frozen at (site build).
threat intel
New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode
A malware researcher has documented a previously unreported Windows backdoor called SLEEPWALKER that remains dormant until triggered by a specific network packet, at which point it executes commands in a custom 23-instruction bytecode language. The malware is delivered as an unsigned 64-bit DLL designed for side-loading.
Why it matters: Windows defenders need to monitor for DLL side-loading activity and unusual network patterns that might activate dormant backdoors in their environment.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode
A malware researcher has documented a previously unreported Windows backdoor called SLEEPWALKER that remains dormant until triggered by a specific network packet, at which point it executes commands in a custom 23-instruction bytecode language. The malware is delivered as an unsigned 64-bit DLL designed for side-loading.
Why it matters: Windows defenders need to monitor for DLL side-loading activity and unusual network patterns that might activate dormant backdoors in their environment.
- Source published
- First seen by Cybersecurity Tracker