← All threat actors
XWormmalware / tool
Reports / IOCs (VT)
221 reports · 10,691 IOCs
Reported activity
2025 – 2026
CVEs seen in reporting
ATT&CK techniques in reports
- T1059.001 PowerShell10
- T1105 Ingress Tool Transfer10
- T1041 Exfiltration Over C2 Channel8
- T1547.001 Registry Run Keys / Startup Folder8
- T1620 Reflective Code Loading7
- T1027 Obfuscated Files or Information6
- T1053.005 Scheduled Task6
- T1140 Deobfuscate/Decode Files or Information6
- T1059.003 Windows Command Shell6
- T1071.001 Web Protocols6
- T1082 System Information Discovery6
- T1204.002 Malicious File6
- T1055 Process Injection5
- T1055.012 Process Hollowing5
- T1005 Data from Local System5
- T1070.004 File Deletion4
- T1190 Exploit Public-Facing Application4
- T1204 User Execution3
- T1071.004 DNS3
- T1497 Virtualization/Sandbox Evasion3