Skip to content

Malware

BOATLAUNCH

FIN7 uses this malware as helper module during intrusion operations.

BOATLAUNCH is a Windows malware family operated by FIN7.

Background

FIN7 employs this malware as a helper module throughout its intrusion operations. BOATLAUNCH persistently scans infected hosts for PowerShell processes and patches them to circumvent the Windows AntiMalware Scan Interface (AMSI).


Source: Malpedia (Fraunhofer FKIE).