Backdoor.NanoCore
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
Backdoor.NanoCore is a Trojancapable of gathering information from Windows systems.
Malicious behavior
Backdoor.NanoCore can provide the threat actorwith information such as computer name and OSof the affected system. It also opens a backdoor that allows the threat actors to access the webcam and microphone, view the desktop, create internet message windows and offers other options.
Protection
Malwarebytes blocks Backdoor.NanoCore
Business remediation
How to remove Backdoor.NanoCore with the Malwarebytes Nebula console
You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.
Nebula endpoint tasks menu
Choose the Scan + Quarantine option. Afterwards you can check the Detections pageto see which threats were found.
On the Quarantine pageyou can see which threats were quarantined and restore them if necessary.
Home remediation
Malwarebytes can remove Backdoor.NanoCore without further user interaction.