Inside the Latest Italian xWorm Campaign: Enhanced Persistence to Confuse DFIR Investigations

During a malware campaign that hit the Italian territory last month a new version of the xWorm malware has been distributed, increasing its capabilities by adopting a technique implemented in a Red Team tool aimed to add a persistence method difficult to address and confusing DFIR investigations.