Skip to content

CrossRoad

Named by 2 kept items in this workspace.

Search every workspace for CrossRoad. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
    article2026-10-20It is written here as CrossRoad (downloader/dropper: performs system validation, cleanup and payload staging, establishes persistence for the late-stage backdoor, then deletes itself from disk).

    downloader/dropper: performs system validation, cleanup and payload staging, establishes persistence for the late-stage backdoor, then deletes itself from disk

  • Investigating Ephemeral Supply Chain Tampering
    writeup2026-10-15It is written here as CROSSROAD (downloader, newly tracked malware family; 64-bit Windows executable written in C, upgrade-now.exe).

    downloader, newly tracked malware family; 64-bit Windows executable written in C, upgrade-now.exe

All threat actors in this workspace.