Microsoft details NeedyMantis malware found in targeted network intrusions

Microsoft says it found NeedyMantis malware in a small number of targeted intrusions affecting telecommunications organizations, universities, medical nonprofits, intergovernmental organizations and government contractors. The malware gives attackers who have already entered a network a way to maintain access. In cases Microsoft examined, a legitimate program loaded a malicious DLL, which unpacked further components from an encrypted archive. The main component then connected to a command-and-control server, allowing operators to load additional modules. Microsoft published file hashes, network indicators and hunting queries for defenders. It has not confirmed what the added modules do or whether NeedyMantis is still in use.