Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le août 14, 2026, 11:00:25

Titre: [SecList]APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
Posté par: igor51 le août 14, 2026, 11:00:25

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.
Source: APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit (https://securelist.com/honeymyte-coolclient-driver-rootkit/121028/)