Description
ExMatter is an exfiltration tool written in .NET that ransomware operators use to steal data before encryption, with researchers observing use by at least one BlackMatter operator.
Stats
- First seen
- May 2022
- Last seen
- September 2026
Also known as
Exmatter
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Trojan.Exmatter |
| ByteCode-MSIL.Trojan.ExMatter |
| Win32.Trojan.Exmatter |
