H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

Agent.btz

[Agent.btz](https://attack.mitre.org/software/S0092) is a worm that primarily spreads itself via removable devices such as USB drives. It reportedly infected U.S. military networks in 2008. (Citation: Securelist Agent.btz)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Agent.btz](https://attack.mitre.org/software/S0092) is a worm that primarily spreads itself via removable devices such as USB drives. It reportedly infected U.S. military networks in 2008. (Citation: Securelist Agent.btz)

Labels

malware
6 recorded

Relationships

uses
to Archive via Custom Method
Technique
uses
to Exfiltration over USB
Technique
uses
to Ingress Tool Transfer
Technique
uses
to Replication Through Removable Media
Technique
uses
to System Network Configuration Discovery
Technique
uses
to System Owner/User Discovery
Technique
2 external

References

mitre-attack
S0092
open
Securelist Agent.btz
https://securelist.com/agent-btz-a-source-of-inspiration/58551/
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance