ShadowPad
Named by 3 kept items in this workspace.
Search every workspace for ShadowPad. It matches the name as written, so it can find other things that share it.
The items that name it 3
malware delivered by UNK_LateNight
Backdoor malware delivered by UNK_LateNight via a DLL-sideloading pair and scheduled task EdgeCore_AutoUpdate; unhooks 20 network monitoring functions for stealth, steals Firefox profile data, sniffs network traffic, and beacons over HTTPS to ms.checrity[.]com using a binary C&C protocol with rotati
Listed among top 5 malware families detected per Recorded Future's Adversary Infrastructure Report 2023 (well-established tool).
All threat actors in this workspace.