Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Smoke Loader Drops Whiffy Recon Wi-Fi Scanning and Geolocation Malware
Malware and Vulnerabilities
August 24, 2023
Secure Works
Whiffy Recon works by checking for the WLAN AutoConfig service (WLANSVC) on the infected system and terminating itself if the service name doesn't exist. Persistence is achieved by means of a shortcut that's added to the Windows Startup folder.
Read More
Whiffy Recon
Wi-Fi scanning
WLAN
Smoke Loader Botnet
Custom Executable
Publisher
Previous
Cyberattack disrupts major Mississippi health system
Breaches and Incidents
Next
Telekopye: Hunting Mammoths using Telegram bot
Identity Theft, Fraud, Scams