indicatorfilename
%PROGRAMDATA%\wt.exe
- First seen
- 2026-05-13
- Last seen
- 2026-05-13
- Sightings
- 1
Posts referencing this indicator
- Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads
Persistent Windows artifact, a copied PowerShell binary disguised as Windows Terminal