🔴 TASK#STOMP PowerShell Backdoor Steals Business Documents and Executes Remote Commands

A Windows-focused backdoor dubbed TASK#STOMP that uses VBScript, PowerShell, Scheduled Tasks, and runtime C# compilation to establish resilient persistence and continuously steal business documents.

The implant also captures screenshots, extracts saved Wi-Fi passwords, harvests clipboard data, and executes arbitrary commands received from its operators.

While the original delivery method is unconfirmed, the location is consistent with payloads introduced through phishing attachments, browser downloads, archive extraction, removable media, or manual execution.