Agent.btz — Malware Profile

Agent.btz is a worm that primarily spreads itself via removable devices such as USB drives. It reportedly infected U.S. military networks in 2008.

MITRE ATT&CK techniques (6)

• T1016 System Network Configuration Discovery
• T1033 System Owner/User Discovery
• T1052.001 Exfiltration over USB
• T1091 Replication Through Removable Media
• T1105 Ingress Tool Transfer
• T1560.003 Archive via Custom Method

Read the full analysis on IntelFusions