MEM:Trojan.Win32.Cometer

[GazaR]

hello,

 

so as the title say i found that Kaspersky is warning me about this fileless malware and i tried to disinfect several times until it finally work.

I work as a cyber security engineer so I'm familiar with malwares and so on, i tried to check Kaspersky reports and found only that he was trying to disinfect the malware from the memory but can't find anything related to the detection in the first place, and a memory malware need a file in the beginning in order to be injected to the memory or else the attacker has a PowerShell access to my machine...

 

tried to search for anything but only found this: https://media.kaspersky.com/en/business-security/fileless-attacks-against-enterprise-networks.pdf

 

malware is now deleted but i want to know how in the first place it entered my machine.

[Joao V.]

Estranho o pessoal do Kaspersky não responder. Estou com um problema gravissímo relacionado a este Trojan. Entretanto, não possuo conhecimento como o amigo acima.