Oyster Malware Scheduled Task 'CaptureService' Creation

Kaung Khant Ko@kaungkhantko

•updated Oct 17, 2025•3•1•261

Detects the creation of a suspicious scheduled task named "CaptureService" that is set to run every 11 minutes. This specific combination of task name, frequency, and executable (rundll32.exe) is indicative of a known persistence technique.