Malware & Tools · CHOPSTICK
Type
malware
Techniques
19
Used By
1 groups
Platforms
Windows, Linux
Description
CHOPSTICK is a malware family of modular backdoors used by APT28. It has been used since at least 2012 and is usually dropped on victims as second-stage malware, though it has been used as first-stage malware in several cases. It has both Windows and Linux variants. (Citation: FireEye APT28) (Citation: ESET Sednit Part 2) (Citation: FireEye APT28 January 2017) (Citation: DOJ GRU Indictment Jul 2018) It is tracked separately from the X-Agent for Android.
Tactic Coverage
Used By (1 groups)
Techniques (19)
References
