TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

As cited

Copy frozen at 2026-09-21 17:09 UTC (site build).

threat intel

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

Researchers disclosed a TASK#STOMP campaign delivering a PowerShell backdoor that automatically harvests business documents, monitors the filesystem for new files, steals Wi-Fi passwords and clipboard contents, captures screenshots, and executes arbitrary commands on compromised hosts.

Why it matters: Organizations using Windows environments are at risk of data exfiltration and credential theft; security teams should investigate TASK#STOMP indicators of compromise (IOCs) in logs and deploy detection rules for PowerShell-based backdoor activity.

Source published

2026-09-21 14:15 UTC

First seen by Cybersecurity Tracker

2026-09-21 15:53 UTC