There might not be any Windows Update history but surely you saw “Installing Updates” in the installer. That sounds pretty normal, I’ve seen this every time I install Windows. In the middle of VM setup there was strange “windows update like” when i rebooted my PC. If you’re such a high value target you should probably get proper IT security consultants. If you think that your PC is compromised, just wipe your disk and reinstall your operating system, there is malware that can survive in firmware, but it’s very rare and highly targeted. There isn’t much use in messing with GlassWire itself, GlassWire is only as good as the Windows network filtering abilities, Guest VMs like WSL and Hyper-V completely bypass it, and would be more likely paths to exfiltrate data, rather than building this hyper specific tool to hide traffic only in GlassWire, which would need to be kept up to date for every GlassWire update. I can’t be asked to sign up to Intezer right now, but I wouldn’t be surprised if the exact same thing shows up when scanning a clean VM with just GlassWire installed.

All the detections have a really low confidence value, and the GlassWire executables are packed which will always increase detections, the memory replacement indicator is in all likelihood a false detection. The SIMalliance Toolbox Browser is a way of accessing the internet-essentially, it's a basic web browser that lets service providers interact with web applications like email.I don’t see anything that jumps out to me as damning evidence that your GlassWire has been manipulated. The vulnerability works by using a piece of software called Browser, which is part of the SIM Application Toolkit (STK) that many phone operators use on their SIM cards. What's particularly concerning about this kind of attack is that it can hide itself very well from the victim, giving the malicious actor more time to exploit the phone. If a user opens the message, hackers can use the code to spy on their calls and messages-and even track their location. This malicious code can then tell the SIM to take over the targeted phone. This complex attack carries out SIM card hacking ( known as SIM jacking attacks) by sending a piece of spyware-like code to a target device using an SMS message. In September 2019, security researchers at AdaptiveMobile Security announced they had discovered a new security vulnerability they called Simjacker.

Someone hacked into my pc using anydesk