SLEEPWALKER

Newly Discovered SLEEPWALKER Backdoor Triggers Execution via Crafted Network Packet

An independent malware researcher has documented a previously unreported Windows backdoor, SLEEPWALKER. The unsigned 64-bit DLL remains inert in memory until a specifically crafted network packet reaches the targeted machine, at which point it executes commands written in a custom 23-instruction bytecode language. The malware is designed for side-loading, and its discovery suggests potential targeted or supply-chain attack vectors. No vendor advisory or official patch is currently available.