Detect and Eliminate Persistent Malware Before It Wreaks Havoc | Huntress

This Huntress case-study report describes multiple intrusion incidents—Cobalt Strike and remote-access tool deployment, years-long persistent malware using .LNK files and malicious services, RDP gateway brute-force with lateral movement and persistence, and a Gootloader SEO-poisoning infection—detected and remediated by Huntress Managed EDR; the report highlights persistence TTPs, critical alerts, and defensive recommendations such as securing endpoints, monitoring authentication, and security awareness training.