FakeM

ATP Sandbox Adv. Heuristics

Stats

First seen: October 2022
Last seen: October 2026

MITRE ATT&CK techniques

4 techniques across 2 tactics.

TA0009 Collection

T1056Input Capture
- T1056.001Keylogging

TA0011 Command and Control

T1001Data Obfuscation
- T1001.003Protocol or Service Impersonation
T1095Non-Application Layer Protocol
T1573Encrypted Channel
- T1573.001Symmetric Cryptography

Associated groups

G0029Scarlet Mimic

Alert name variants

Alert Name	Engine
Win32.Backdoor.FakeM	ATP Sandbox Adv. Heuristics

Related families

Cobalt Strike TONESHELL InvisiMole Derusbi NETWIRE