Resident
- Malware type
- backdoor
- Profile updated
- 2026-07-07 14:41:48
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
According to Cisco Talos, Resident is a backdoor likely developed by the same author as win.warmcookie, and it was observed being delivered in intrusions they attribute to TA866.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Resident_Auto (yara-rule)
Reports & references
- Cisco Talos — Highlighting Ta866 Asylum Ambuscade (report)
- esentire.com — Esentire Threat Intelligence Malware Analysis Resident Campaign (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Resident (report)