Airstalk Malware Exploits VMware AirWatch MDM APIs for Covert C2 Operations

Cyberpress • November 6, 2025

Exclusive Cyber Security News platform that provide in-depth analysis Cyber Attacks, Malware infection, Data breaches, Vulnerabilities, New researches & other Cyber stories. Us: [email protected]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Airstalk Malware Exploits AirWatch MDM for Covert C2 Communication Airstalk malware has been identified exploiting the AirWatch Mobile Device Management (MDM) platform to establish covert command and control (C2) communication. This malware leverages vulnerabilities in VMware's AirWatch APIs, potentially affecting organizations utilizing this MDM solution. The exploitation allows attackers to maintain persistent access to compromised devices. 3 sources 48

Extracted Entities

Airstalk Malware Exploits VMware AirWatch MDM APIs for Covert C2 Operations

The full story

Extracted Entities

Attack Types (2)

Malware (1)

Platforms (1)