Silent Malware 'SLEEPWALKER' Awakens on Command

A previously unknown malware implant, named SLEEPWALKER, has been identified by security researchers. Unlike typical malware, SLEEPWALKER remains dormant for weeks, lying in wait until it receives a specially crafted network signal. This signal not only awakens the malware but also dictates its capabilities, which can include scheduling activities, communicating with other systems, and executing code.

Disguised as a legitimate component of ESET's Management Agent, SLEEPWALKER operates from within a trusted application, making it difficult for security software to detect. Researchers note that the malware contains no initial malicious code, suggesting it is designed to avoid immediate flagging. The code's structure exhibits some imperfections, possibly indicating it was a work in progress. While no active campaigns or confirmed victims have been linked to SLEEPWALKER, its advanced design suggests it is likely a product of nation-state actors focused on specific targets.