RIFLESPINE

Malware & Tools · RIFLESPINE

· MalwareS1222 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Linux

Description

RIFLESPINE is a cross-platform backdoor that leverages Google Drive for file transfer and command execution.(Citation: Google Cloud Mandiant UNC3886 2024)

Tactic Coverage

command and control (4)execution (1)collection (1)discovery (1)stealth (1)persistence (1)privilege escalation (1)exfiltration (1)

Used By (1 groups)

G1048UNC3886

Techniques (10)

T1059.004Unix Shell

execution

T1071.001Web Protocols

command and control

T1074.001Local Data Staging

collection

T1082System Information Discovery

discovery

T1102.002Bidirectional Communication

command and control

T1105Ingress Tool Transfer

command and control

T1140

References

https://attack.mitre.org/software/S1222 https://cloud.google.com/blog/topics/threat-intelligence/uncovering-unc3886-espionage-operations