The Adwind remote access Trojan (RAT) has surfaced again after 2015 of apparent inactivity. The latest version is believed to enjoy a zero detection rate, being capable of bypassing all anti-virus protection software and researchers at Heimdal Security reported that it had been used to target companies in Denmark. The Java-based malware is typically associated with APT campaigns; it both exfiltrates data from the target, and opens a backdoor, allowing the hacker to place more malware into the affected machines. If the Adwind code is executed, the infected machine is recruited into a botnet.
The Adwind remote access Trojan (RAT) has surfaced again after several months of apparent inactivity. The latest version is believed to enjoy a zero detection rate, being capable of bypassing all anti-virus protection software and researchers at Heimdal Security reported that it had been used to target companies in Denmark. The Java-based malware is typically associated with APT campaigns; it both exfiltrates data from the target, and opens a backdoor, allowing the hacker to place more malware into the affected machines. If the Adwind code is executed, the infected machine is recruited into a botnet.