Advanced Persistent Threats Utilize NeedyMantis Malware for Sustained Network Breaches

Hackers are using the NeedyMantis malware family to maintain persistent access in compromised networks, employing techniques like DLL sideloading and encrypted archives. Microsoft links the malware to the Storm-3069 group, with activity potentially tied to China, and provides indicators of compromise for detection.

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis.

The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least

Read original article