Meterpreter (Windows)

Malware type
rat, trojan
Family
Malware family
Profile updated
2026-07-07 12:45:15

Targeted industries: government-and-public-sector financial-services technology-and-telecommunications

Context

Meterpreter is a versatile payload part of the Metasploit Framework, known for its capability to provide dynamic and stealthy remote access to compromised systems. It supports a wide range of post-exploitation features including process migration, file system manipulation, and execution of commands on the target machine.

Exploited vulnerabilities

  • CVE-2022-42475 (vulnerability)
  • CVE-2022-47966 (vulnerability)

Reports & references

  • blog.morphisec.com — Fin7 Attacks Restaurant Industry (report)
  • secureworks.com — Gold Franklin (report)
  • CISA — Aa20 301A (report)
  • proofpoint.com — Chasing Currents Espionage South China Sea (report)
  • Palo Alto Unit 42 — Obscureserpens (report)
  • secureworks.com — Gold Winter (report)
  • research.checkpoint.com — Dangeroussavanna Two Year Long Campaign Targets Financial Institutions In French Speaking Africa (report)
  • asec.ahnlab.com — 56236 (report)
  • Kaspersky — 109552 (report)
  • Cisco Talos — Uat 5918 Targets Critical Infra In Taiwan (report)
  • elastic.co — Cuba Ransomware Campaign Analysis (report)
  • cynet.com — Threats Looming Over The Horizon (report)
  • info.spamhaus.com — Q4%202023%20Botnet%20Threat%20Update (report)
  • cybersecurity.att.com — Shikitega New Stealthy Malware Targeting Linux (report)
  • blog.lumen.com — No Longer Just Theory Black Lotus Labs Uncovers Linux Executables Deployed As Stealth Windows Loaders (report)
  • mandiant.widen.net — M Trends 2023 (report)
  • Kaspersky — 88069 (report)
  • go.recordedfuture.com — Cta 2021 0107 (report)
  • news.sophos.com — Amsi Bypasses Remain Tricks Of The Malware Trade (report)
  • securityintelligence.com — Trickbot Group Systematically Attacking Ukraine (report)
  • asec.ahnlab.com — 26705 (report)
  • Trend Micro — How Cybercriminals Abuse Cloud Tunneling Services (report)
  • explore.group-ib.com — Hi Tech Crime 2018 (report)
  • fintechsecurity.com.hk — 01.Dmitry Annual Group Ib Report High Tech Crime Trends (report)
  • michaelkoczwara.medium.com — Hunting C2 With Shodan 223Ca250D06F (report)

External references