MuddyWater Node.js Spawning fmapp.exe
Detects Node.js executing the Fortemedia audio utility fmapp.exe, indicative of a staged DLL sideloading attack orchestrated by a script.
Microsoft Sentinel (KQL)

Detects Node.js executing the Fortemedia audio utility fmapp.exe, indicative of a staged DLL sideloading attack orchestrated by a script.

Already have an account?