Threat Encyclopedia

Brambul.Worm

Description

This indicates that a system might be infected by Brambul.
Brambul is a brute-force authentication worm that is part of the HIDDEN COBRA campaign.

Affected Products

Any unprotected Windows system is vulnerable.

Impact

System Compromise: Remote attackers can gain access to information on vulnerable systems.

Recommended Actions

If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.

Other References

https://www.us-cert.gov/ncas/analysis-reports/AR18-149A

Telemetry