T1218.001 - Compiled HTML File - MITRE ATT&CK

Related Threat Clusters

JanaWare Ransomware Targets Turkey Using Adwind RAT
The JanaWare ransomware campaign has emerged, targeting users in Turkey through a customized variant of the Adwind RAT. The malware is distributed via phishing emails containing malicious JAR files, which, when…

9 articles · Updated April 15, 2026
Abuse of Microsoft Defender Driver Enables Kernel-Level Attacks
Research reveals that the Microsoft Defender Boot-Time Removal driver (BTR.sys) can be weaponized to perform unauthorized file and registry operations from kernel mode. This exploitation does not rely on traditional…

10 articles · Updated August 20, 2026
Signed Malware Deploys RMM Backdoors via Phishing Campaigns
Microsoft's Defender Security Research Team reported phishing campaigns utilizing signed malware disguised as workplace applications. This malware, backed by a stolen EV certificate, installs remote monitoring and…

5 articles · Updated March 5, 2026

Windows Defender Driver Abuse Enables Kernel — Gbhackers · August 21, 2026
JanaWare Ransomware Targets Turkey via Adwind RAT — Socprime · April 15, 2026
Signed malware impersonating workplace apps deploys RMM backdoors — Blogs.Microsoft · March 3, 2026

Malware Phishing Ransomware Outlook Turkey Adwind RAT T1036 - Masquerading T1112 - Modify Registry T1486 - Data Encrypted for Impact T1566.001 - Spearphishing Attachment Java Microsoft Defender