Skip to content
Threat Feed
Subscribe

Tag

Mofcomp

1 brief RSS
medium advisory

Suspicious Mofcomp Activity Leading to WMI Abuse

Attackers may leverage the mofcomp.exe utility to compile malicious MOF files, enabling them to manipulate the Windows Management Instrumentation (WMI) repository for persistence or execution of arbitrary code.

Windows execution persistence wmi mofcomp
2r 3t