wmi 2

• No File, No Fixed C2: Inside NetCon, a WMI Backdoor That Reads Its Command Server Off the Blockchain Jul 10, 2026
• The beacon that won't decrypt unless it beats AMSI: pulling apart a WMI-launched PowerShell loader May 30, 2026