Emerging Threats
Actor2020

Winnti

2Rules
2References
1Folders
2021-11-27Latest
Summary

Winnti is tracked here as a threat actor, intrusion set, or campaign with 2 Sigma detections spanning 2020. Coverage centers on windows / process_creation.

Related Detections
Search this threat
2 rulesInspect a rule without leaving your results.
criticaltestEmerging Threat

Winnti Malware HK University Campaign

Detects specific process characteristics of Winnti malware noticed in Dec/Jan 2020 in a campaign against Honk Kong universities

windowsprocess_creation
2021-11-27
criticalstableEmerging Threat

Winnti Pipemon Characteristics

Detects specific process characteristics of Winnti Pipemon malware reported by ESET

windowsprocess_creation
2021-11-27
References