KICKPLATE
- Malware type
- backdoor, downloader
- Family
- Malware family
- Operating systems
- windows
- Languages
- nim
- Profile updated
- 2026-09-08 06:52:30
Targeted industries: financial-services retail-and-hospitality
Targeted regions: country_code:br
Context
KICKPLATE is a custom Nim backdoor used by BREEZE COMET (also tracked as PLUMP SPIDER) against Brazilian financial organisations. It masquerades as Windows Update Health Tools and exists to deliver auxiliary payloads and hold host-level persistence: it drives the group's SOCKS5 tunnelers, writes registry run keys and quietly alters Windows services. The operators pair it with scheduled tasks running as SYSTEM and with shortcut files planted in user startup folders.
Used by threat actors
- BREEZE COMET (threat-actor)