TASK#STOMP PowerShell Backdoor Steals Business Documents and Maintains Persistent Remote Access

Reported 24 Sep 2026 by otx · Severity: medium

A sophisticated PowerShell-based backdoor named TASK#STOMP has been discovered that specifically targets business documents while maintaining persistent remote access to compromised systems. The infection begins with VBScript execution, establishing persistence through scheduled