malware

ISMInjector

S0189 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[ISMInjector](https://attack.mitre.org/software/S0189) is a Trojan used to install another [OilRig](https://attack.mitre.org/groups/G0049) backdoor, ISMAgent. (Citation: OilRig New Delivery Oct 2017)

Actors that use this

1 tracked actor

OilRig (APT34)ATT&CK-attributed