A newly analyzed Windows backdoor named SLEEPWALKER uses a passive command-and-control model designed to evade conventional beaconing-based detections. Raw-packet activation, DNS-based tasking support, VMware VMCI communications, named-pipe capabilities, and in-memory payload execution. No threat actor, victim, delivery chain, or live campaign has yet been attributed to the malware. SLEEPWALKER is an unsigned 64-bit Windows DLL […]
The post SLEEPWALKER Malware Uses Raw Packets, DNS and VMware VMCI for Covert Communications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.