REPTILE

Malware & Tools · REPTILE

· MalwareS1219 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Linux

Description

REPTILE is an open-source Linux rootkit with multiple components that provides backdoor access and functionality.(Citation: Google Cloud Mandiant UNC3886 2024)

Tactic Coverage

stealth (5)persistence (5)command and control (4)privilege escalation (3)execution (1)

Used By (1 groups)

G1048UNC3886

Techniques (11)

T1014Rootkit

stealth

T1059.004Unix Shell

execution

T1095Non-Application Layer Protocol

command and control

T1140Deobfuscate/Decode Files or Information

stealth

T1205Traffic Signaling

stealthpersistence

T1205.001Port Knocking

stealthpersistence

References

https://attack.mitre.org/software/S1219 https://cloud.google.com/blog/topics/threat-intelligence/uncovering-unc3886-espionage-operations