Description
Shadowhammer is an implant associated with Operation ShadowHammer, a high profile supply chain attack documented by Kaspersky in 2019. The campaign tampered with software update infrastructure, and researchers connected its tooling, which included ShadowPad, to the Winnti Group.
Stats
- First seen
- March 2022
- Last seen
- September 2026
Also known as
ShadowHammer
Alert name variants
| Alert Name |
|---|
| Win32.Backdoor.Shadowhammer |
| Win32.Backdoor.ShadowHammer |
| Win32.Trojan.ShadowHammer |