Backdoor.Winnti attackers have a skeleton in their closet?

## Executive summary Symantec analyzed Trojan.Skelky, a skeleton-key tool that enables attacker-chosen password authentication, and found temporal and host-level linkage to Backdoor.Winnti samples; the report lists observed file names and hashes, notes consistent reuse of a hashed password across variants suggesting a single operator, and documents detections where available.