NeedyMantis Tied to Long-Term Persistence in Breached Networks

NeedyMantis tied to long-term persistence in breached networks

A newly detailed post on NeedyMantis describes its use as a persistence mechanism for maintaining extended access inside already compromised environments. The activity is framed not as initial intrusion, but as post-compromise retention designed...

How NeedyMantis Malware Maintains Network Access Post-Breach

Microsoft disclosed a sophisticated malware family called NeedyMantis that attackers are using to maintain long-term access in networks they have already breached. The malware has appeared in a small number of targeted intrusions against telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors since at least October 2025. Microsoft discovered NeedyMantis while investigating t…

Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft

Microsoft has analyzed NeedyMantis, the malware used by the Chinese hackers behind the Daemon Tools supply chain attack.

Microsoft Finds New Malware Used to Maintain Secret Access Inside Target Networks

Microsoft Threat Intelligence has uncovered NeedyMantis, a modular post-compromise malware framework designed to preserve covert access inside already-breached networks. The malware has appeared in a small number of highly targeted intrusions involving telecommunications providers, universities, medical nonprofits, intergovernmental bodies, and government contractors. Activity dates to at least October 2025, suggesting operators have quietly use…

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least