Registry Persistence via NVIDIA Container Runtime Monitor

Duo Tech@duotech

•updated Jul 17, 2026•0•0•1

Detects unauthorized modifications to Windows Registry Run keys that attempt to masquerade as the legitimate 'NVIDIA Container Runtime Monitor' component. Adversaries can add malicious entries to these Run keys to achieve persistence, where the specified binary executes automatically upon user login.