criticaltestEmerging Threat
Winnti Malware HK University Campaign
Detects specific process characteristics of Winnti malware noticed in Dec/Jan 2020 in a campaign against Honk Kong universities
windowsprocess_creation
2021-11-27
Winnti is tracked here as a threat actor, intrusion set, or campaign with 2 Sigma detections spanning 2020. Coverage centers on windows / process_creation.
Detects specific process characteristics of Winnti malware noticed in Dec/Jan 2020 in a campaign against Honk Kong universities
Detects specific process characteristics of Winnti Pipemon malware reported by ESET