NeedyMantis Tied to Long-Term Persistence in Breached Networks

NeedyMantis tied to long-term persistence in breached networks

A newly detailed post on NeedyMantis describes its use as a persistence mechanism for maintaining extended access inside already compromised environments. The activity is framed not as initial intrusion, but as post-compromise retention designed...

Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft

Microsoft has analyzed NeedyMantis, the malware used by the Chinese hackers behind the Daemon Tools supply chain attack.

Microsoft Finds New Malware Used to Maintain Secret Access Inside Target Networks

Microsoft Threat Intelligence has uncovered NeedyMantis, a modular post-compromise malware framework designed to preserve covert access inside already-breached networks. The malware has appeared in a small number of highly targeted intrusions involving telecommunications providers, universities, medical nonprofits, intergovernmental bodies, and government contractors. Activity dates to at least October 2025, suggesting operators have quietly use…

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least

Microsoft Finds New Malware Used by Hackers to Maintain Secret Access Inside Target Networks

Microsoft Threat Intelligence has uncovered NeedyMantis, a modular post-compromise malware framework designed to preserve covert access inside already-breached networks. The malware has appeared in a small number of highly targeted intrusions involving telecommunications providers, universities, medical nonprofits, intergovernmental bodies, and government contractors. Activity dates to at least October 2025, suggesting operators have quietly use…

NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom… Read more →