Security

Non-Sucking Service Manager (NSSM)

A legitimate open-source utility that wraps any program so it can run as a Windows service. Attackers rename and reuse it to install malware, such as a cryptominer, as a persistent service that survives reboots.

Deep dive

Learn Article

How to Detect a Hidden Cryptominer on a Windows Server

Modern miners evade Task Manager by design. Hunt on process lineage, service persistence and outbound connections instead of the one tool the malware is built to watch for.

intermediate 5 min read

Back to glossary