Skip to content

Malware

HAWKBALL

HAWKBALL is a backdoor that attackers can use to collect information from the victim, as well as to deliver payloads.

HAWKBALL is a Windows malware family.

Background

HAWKBALL is a backdoor that operators can leverage both to gather information from a victim and to push additional payloads. It can profile the host, set up a named pipe to run native Windows commands, kill processes, create, delete, and upload files, search for files, and enumerate drives.


Source: Malpedia (Fraunhofer FKIE).