NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Microsoft has uncovered NeedyMantis, a stealthy modular post-compromise framework linked to China-aligned operators that uses DLL sideloading, encrypted custom archives, anti-analysis techniques, and WebSocket C2 to maintain long-term access across selectively targeted telecom, academic, nonprofit, intergovernmental, and government-contractor networks.