Romcom Malware Persistence Registry

nomit vyas@xoxo

•updated Jun 25, 2026•1•1•9

Detects persistence via registry modification commonly associated with RomCom adversary activity (e.g., Mythic, SnipBot, MeltingClaw) post-CVE-2025-8088 exploitation.