SLEEPWALKER: Detection Notes on a Backdoor That Never Calls Home
·1192 words·6 mins
SLEEPWALKER carries no command-and-control infrastructure and generates no outbound traffic on its own. That design puts it outside most of what a network-centric detection stack is tuned to catch, and moves the detection burden onto host integrity and configuration state.