SnakeDiskMalware
According to X-Force, SnakeDisk is a USB worm, dropping further payloadsFrom MISP Galaxy
Last reported 9 months ago, by Trend Micro Research1 report
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1053.005Scheduled Task
“Persistence is then established through registry run keys and scheduled tasks to maintain access.”
- T1684Social Engineering
“…or a particular group of activities with modern TTPs characterized by AI-generated attacks, sophisticated phishing attacks, and/or social engineering).”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Key Insights on SHADOW-AETHER-015 and Earth Preta from the 2025 MITRE ATT&CK Evaluation with TrendAI Vision One™“Earth Preta’s recent activity features SnakeDisk, a USB-propagating worm used to deliver Yokai and updated ToneShell backdoors, enabling compromise of air-gapped or restricted networks.”
Thanks — we review every report.