S9016 Caminho
malwareEnterpriseplatformsWindows
also known asCaminho · VMDetectLoader
Caminho is a downloader that has been used by threat actors since at least 2025 to deliver various strains of malware such as XWorm.
01
techniques used (6)
ATT&CK techniques this enables or maps to.
02
used by groups (1)
Threat groups associated with this.
03
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan