A Decade of WMI Abuse – an Overview of Techniques in Modern Malware

Windows Management Instrumentation (WMI) is the infrastructure for management data and operations on Windows-based operating systems. The earliest mainstream use of WMI in malware was Stuxnet, a cyber-weapon that completely reshaped cybersecurity.

This whitepaper presents a summary of malware that uses WMI to achieve their goal.