Microsoft: WMIC will be removed after Windows 11 25H2 upgrade
ID: db028f48-c364-540d-b49a-2f22988a327e
STIX ID: report--db028f48-c364-540d-b49a-2f22988a327e
Feed Name: Bleeping Computer
Threat Score
Microsoft announced WMIC will be removed from Windows 11 25H2 and later and recommends IT teams migrate scripts and workflows to PowerShell or programmatic APIs; WMIC has long been abused as a living-off-the-land binary by malware (including ransomware) to delete Shadow Volume Copies, query or uninstall antivirus, and tamper with Defender, and its removal is expected to reduce that abuse.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.