Csis Hta Downloader Antino

Duo Tech@duotech

•updated Aug 14, 2026•1•0•3

Detects mshta.exe execution combined with CSIS geopolitical lure content or the known TEST.hta downloader artifact used to deliver the Antino backdoor