RAPIDPULSE

Malware & Tools · RAPIDPULSE

· MalwareS1113 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Network Devices, Linux

Description

RAPIDPULSE is a web shell that exists as a modification to a legitimate Pulse Secure file that has been used by APT5 since at least 2021.(Citation: Mandiant Pulse Secure Update May 2021)

Tactic Coverage

stealth (2)collection (1)persistence (1)

Used By (1 groups)

G1023APT5Mulberry Typhoon, MANGANESE

Techniques (4)

T1005Data from Local System

collection

T1027.013Encrypted/Encoded File

stealth

T1140Deobfuscate/Decode Files or Information

stealth

T1505.003Web Shell

persistence

References

https://attack.mitre.org/software/S1113 https://www.mandiant.com/resources/blog/updates-on-chinese-apt-compromising-pulse-secure-vpn-devices