Romcom Malware Persistence Registry

Ibrahim Saud@tektrix

•updated Jun 19, 2026•5•1•10

Detects persistence via registry modification commonly associated with RomCom adversary activity (e.g., Mythic, SnipBot, MeltingClaw) post-CVE-2025-8088 exploitation.