malware

ServHelper

S0382 · ATT&CK v19.2

Platforms

Windows

Tracked actors

Description

[ServHelper](https://attack.mitre.org/software/S0382) is a backdoor first observed in late 2018. The backdoor is written in Delphi and is typically delivered as a DLL file.(Citation: Proofpoint TA505 Jan 2019)

Actors that use this

1 tracked actor

Cl0pATT&CK-attributed