APT36 CreepDropper Scheduled Task Persistence

Georg Lauenstein@gsec

•updated Mar 16, 2026•1•0•106

Detects scheduled task creation with naming patterns matching APT36 CreepDropper persistence mechanism