Fysbis

· MalwareS0410 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Linux

Description

Fysbis is a Linux-based backdoor used by APT28 that dates back to at least 2014.(Citation: Fysbis Palo Alto Analysis)

Tactic Coverage

stealth (4)discovery (3)persistence (2)privilege escalation (2)collection (1)credential access (1)execution (1)command and control (1)

Used By (1 groups)

Techniques (12)

T1027.013Encrypted/Encoded File

stealth

T1036.004Masquerade Task or Service

stealth

T1036.005Match Legitimate Resource Name or Location

stealth

T1056.001Keylogging

collectioncredential access

T1057Process Discovery

discovery

T1059.004Unix Shell

execution

References