MEDUSA

Malware & Tools · MEDUSA

· MalwareS1220 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Linux

Description

MEDUSA is an open-source rootkit that is capable of dynamic linker hijacking, command execution, and logging credentials.(Citation: Google Cloud Mandiant UNC3886 2024)

Tactic Coverage

stealth (3)lateral movement (1)execution (1)

Used By (1 groups)

G1048UNC3886

Techniques (4)

T1014Rootkit

stealth

T1027.013Encrypted/Encoded File

stealth

T1563.001SSH Hijacking

lateral movement

T1574.006Dynamic Linker Hijacking

stealthexecution

References

https://attack.mitre.org/software/S1220 https://cloud.google.com/blog/topics/threat-intelligence/uncovering-unc3886-espionage-operations