New TASK#STOMP Windows Backdoor Enables Continuous Document Theft

Summary

A new sophisticated Windows backdoor, dubbed TASK#STOMP, has been identified that leverages PowerShell and scheduled tasks for persistent access and remote control. It employs runtime C# compilation to evade detection and is designed to continuously exfiltrate sensitive business documents.

Indicators of Compromise

• malware — TASK#STOMP

Entities