Home > List all groups > List all tools > List all groups using tool PowHeartBeat

Threat Group Cards: A Threat Actor Encyclopedia

Names	PowHeartBeat
Category	Malware
Type	Backdoor
Description	(ESET) PowHeartBeat is a full-featured backdoor written in PowerShell, obfuscated using various techniques such as compression, encoding, and encryption. Based on ESET telemetry, we believe PowHeartBeat replaced CLRLoad in more recent Worok campaigns as the tool used to launch PNGLoad.
Information	<https://www.welivesecurity.com/2022/09/06/worok-big-picture/>

Last change to this tool card: 13 September 2022

Download this tool card in JSON format

Previous: PowGoop
Next: POWRUNER

1 group listed (1 APT, 0 other, 0 unknown)

APT groups