SLIGHTPULSE

Malware & Tools · SLIGHTPULSE

· MalwareS1110 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Network Devices, Linux

Description

SLIGHTPULSE is a web shell that was used by APT5 as early as 2020 including against Pulse Secure VPNs at US Defense Industrial Base (DIB) entities.(Citation: Mandiant Pulse Secure Zero-Day April 2021)

Tactic Coverage

command and control (4)collection (2)execution (1)stealth (1)persistence (1)

Used By (1 groups)

G1023APT5Mulberry Typhoon, MANGANESE

Techniques (9)

T1005Data from Local System

collection

T1059Command and Scripting Interpreter

execution

T1071.001Web Protocols

command and control

T1074.001Local Data Staging

collection

T1105Ingress Tool Transfer

command and control

T1132.001Standard Encoding

command and control

T1140

References

https://attack.mitre.org/software/S1110 https://www.mandiant.com/resources/blog/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day