Apt36 Vibeware Suspicious Scheduled Tasks

Daniel Jeremiah@daniyyell

•updated Mar 15, 2026•1•0•34

This rule detects the creation of scheduled tasks with names specifically identified in the Bitdefender APT36 Vibeware report. These task names are used by APT36 to maintain persistence for their malware, often disguised as legitimate system processes.