XWorm 7.1

Reported Context (1)

script, which launches the trusted Microsoft application “Aspnet_compiler.exe” and injects into it an XWorm 7.1 payload via reflective DLL injection. Microsoft Warns of Tax-Season Phishing Using RMM Tools and PhaaS Kits

Malware (5)

People (2)

MITRE ATT&CK (5)

Vendors (4)

Products (9)

Tools (3)

Industries (7)

Countries (7)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.