Post-Compromise - 1

2026 (2)

September (2)

security: NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Microsoft Security Blog

2026-09-28

Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions. It uses custom loaders, encrypted archives, and extensible components to keep access and support follow-on activity.

security: Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Microsoft Security Blog

2026-09-24

Microsoft says Storm-2570 reuses the same post-compromise tools and techniques across multiple ransomware deployments, including Qilin, DragonForce, Anubis, and BERT. The post outlines guidance for defenders to detect and disrupt the activity before ransomware is deployed.