Unverified50% confidenceFactExact time
The attack achieves persistence via registry key values, with the configuration using the string IMBotKing for symmetric encryption.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/21/2026
First Seen
Valid until: 12/20/2026
Sources
Related Entities
Related Claims
UnverifiediMessage 使用椭圆曲线 Diffie-Hellman（ECDH）协商会话密钥，以 AES-128-CTR 模式加密消息正文，并采用 ECDSA 算法签名防篡改72% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.72% similarUnverified致码AI Coder支持WebDAV云同步和加密文本迁移进行配置备份70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/938221API
curl https://kongchang.com/api/v1/knowledge/claims/938221MCP
get_claim(id=938221)