
| Names | WizardNet | |
| Category | Malware | |
| Type | Backdoor | |
| Description | (ESET) The final payload is a backdoor that we named WizardNet – a modular implant that connects to a remote controller to receive and execute .NET modules on the compromised machine. | |
| Information | <https://www.welivesecurity.com/en/eset-research/thewizards-apt-group-slaac-spoofing-adversary-in-the-middle-attacks/> | |
Last change to this tool card: 27 June 2025
Download this tool card in JSON format
Previous: WITCHCOVEN
Next: WmiExec
| Changed | Name | Country | Observed | ||
APT groups | |||||
| TheWizards | 2022 | ||||
1 group listed (1 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||