Skip to content
MalwareWiki

Malware

POORTRY

According to Mandiant, POORTRY is a malware written as a driver, signed with a Microsoft Windows Hardware Compatibility Authenticode signature.

POORTRY is a Windows malware family.

Background

Mandiant reports that POORTRY takes the form of a malicious driver bearing a Microsoft Windows Hardware Compatibility Authenticode signature. The malware has been seen in use by UNC3944.

Source: Malpedia (Fraunhofer FKIE).