Description
IsmAgent is a backdoor used by the OilRig intrusion set, whose researchers documented its use of DNS tunneling for command and control alongside the group's other customized implants.
Stats
- First seen
- May 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Dropper.IsmAgent |
| Win32.Backdoor.IsmAgent |
| Win32.Dropper.IsmAgent |