ZhMimikatz
- First seen
- 2023-01-15 00:00:00
- Malware type
- credential-stealer, keylogger
- Family
- Malware family
- Profile updated
- 2026-07-07 13:20:22
Targeted industries: government-and-public-sector technology-and-telecommunications financial-services
Context
ZhMimikatz is a malicious tool primarily designed for credential theft. It is known for its capability to extract passwords, hashes, and PINs from Windows systems, targeting various sectors including government and technology.
Reports & references
- cylance.com — Cylance Operation Cleaver Report (report)
- sans.org — Summit Archive 1554718868 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Zhmimikatz (report)