Description
Wimad is a mass mailing worm that spreads through email attachments and network shares, harvesting addresses to continue its propagation. It can download additional payloads from remote servers, and its worm behavior moves infections across organizations without further user action. Detections under this name indicate worm activity, so responders should clean the host and audit mail flow and shared storage.
Stats
- First seen
- January 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Document-Multimedia.Downloader.Wimad |
| Document-Multimedia.Dropper.Wimad |
| Document-Multimedia.Trojan.Wimad |
| Trojan.Downloader.Wimad.G |
| Trojan.Downloader.Wimad.H |
| Trojan.Downloader.WMA.Wimad.AN |
| Trojan.Wimad.Gen.1 |
| Win32.Trojan.Wimad |