Phoenix
Sigma IntelligenceBeta

Search rules

Search the full rule library from any page.

    Open navigation menuClose navigation menu
    Emerging Threats
    Malware2017

    CosmicDuke

    1Rules
    1References
    1Folders
    2022-10-09Latest
    Summary

    CosmicDuke is tracked here as a malware family or toolset with 1 Sigma detection spanning 2017. Coverage centers on windows / security.

    Related Detections
    Search this threat
    1 rulesInspect a rule without leaving your results.
    criticaltestEmerging Threat

    CosmicDuke Service Installation

    Detects the installation of a service named "javamtsup" on the system. The CosmicDuke info stealer uses Windows services typically named "javamtsup" for persistence.

    windowssecurity
    2022-10-09
    References
    1
    Resolving title…
    blog.f-secure.com