Search/Microsoft Dissects PipeMagic Modular Backdoor
● News

Microsoft Dissects PipeMagic Modular Backdoor

Microsoft has delved into the inner workings of PipeMagic, a modular backdoor used in multiple ransomware attacks since the beginning of this year. Posing as a legitimate open source ChatGPT Desktop Application, PipeMagic is a sophisticated malware framework that provides attackers with persistent access to the compromised system. The backdoor uses modules for its various capabilities, such as command-and-control (C&C) communication, and is able to dynamically execute payloads and provide the attackers with granular control over code execution, Microsoft explains. “By offloading network communication and backdoor tasks to discrete modules, PipeMagic maintains a modular, stealthy, and highly extensible architecture, making detection and analysis significantly challenging,” the company…

Read original article
Source
securityweek.com
Published
Aug 19, 2025
Mentions
5
language: en
Connections
6 relationships