Skip to main content
Microsoft Security

Microsoft Incident Response Posts

Microsoft Incident Response
Person sitting on a couch using a laptop.
Published
13 min read

StilachiRAT analysis: From system reconnaissance to cryptocurrency theft 

Microsoft Incident Response uncovered a novel remote access trojan (RAT) named StilachiRAT, which demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. This blog primarily focuses on analysis of the WWStartupCtrl64.dll module that contains the RAT capabilities and summarizes the malware’s key behaviors, capabilities, and the potential risk posed to systems and users.

Conference room or board room meeting with people sitting around table in a room with international time clocks, and a map projection.
Published
4 min read

An integrated incident response solution with Microsoft and PwC 

Microsoft Incident Response and PwC have announced a new global alliance to expand their joint Incident Response and Recovery capability. In this partnership, Microsoft IR will begin the initial containment and investigation of a cyber incident, while PwC will work on securely rebuilding and restoring mission-critical system, providing customers with a more comprehensive and seamless incident response experience.