Meterpreter (Windows)
- Malware type
- rat, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 12:45:15
Targeted industries: government-and-public-sector financial-services technology-and-telecommunications
Context
Meterpreter is a versatile payload part of the Metasploit Framework, known for its capability to provide dynamic and stealthy remote access to compromised systems. It supports a wide range of post-exploitation features including process migration, file system manipulation, and execution of commands on the target machine.
Exploited vulnerabilities
- CVE-2022-42475 (vulnerability)
- CVE-2022-47966 (vulnerability)
Reports & references
- secureworks.com — Gold Franklin (report)
- blog.morphisec.com — Fin7 Attacks Restaurant Industry (report)
- secureworks.com — Gold Winter (report)
- research.checkpoint.com — Dangeroussavanna Two Year Long Campaign Targets Financial Institutions In French Speaking Africa (report)
- info.spamhaus.com — Q4%202023%20Botnet%20Threat%20Update (report)
- CISA — Aa20 301A (report)
- Palo Alto Unit 42 — Obscureserpens (report)
- proofpoint.com — Chasing Currents Espionage South China Sea (report)
- Kaspersky — 109552 (report)
- Cisco Talos — Uat 5918 Targets Critical Infra In Taiwan (report)
- asec.ahnlab.com — 56236 (report)
- elastic.co — Cuba Ransomware Campaign Analysis (report)
- cynet.com — Threats Looming Over The Horizon (report)
- cybersecurity.att.com — Shikitega New Stealthy Malware Targeting Linux (report)
- asec.ahnlab.com — 53046 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Meterpreter (report)
- seqrite.com — Operation Barrelfire Noisybear Kazakhstan Oil Gas Sector (report)
- schierlm.users.sourceforge.net — Avevasion (report)
- CISA — Aa23 250A Apt Actors Exploit Cve 2022 47966 And Cve 2022 42475 (report)
- cybereason.com — Threat Analysis Report Abusing Notepad Plugins For Evasion And Persistence (report)
- recordedfuture.com — Chinese Group Calypso Exploiting Microsoft Exchange (report)
- countercraftsec.com — Shellcode Detection Using Realtime Kernel Monitoring (report)
- mandiant.widen.net — M Trends 2023 (report)
- blog.lumen.com — No Longer Just Theory Black Lotus Labs Uncovers Linux Executables Deployed As Stealth Windows Loaders (report)
- Kaspersky — 88069 (report)