S0171Windows

S0171Felismus

Platforms
1
ATT&CK
14.1
References
3

Description

[Felismus](https://attack.mitre.org/software/S0171) is a modular backdoor that has been used by [Sowbug](https://attack.mitre.org/groups/G0054). (Citation: Symantec Sowbug Nov 2017) (Citation: Forcepoint Felismus Mar 2017) Documented platforms: Windows. Attributed to ATT&CK group: Sowbug. Catalogued in ATT&CK 14.1. 3 references curated.

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0171
  2. https://www.symantec.com/connect/blogs/sowbug-cyber-espionage-group-targets-south-american-and-southeast-asian-governments
  3. https://blogs.forcepoint.com/security-labs/playing-cat-mouse-introducing-felismus-malware

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Felismus RAT
Software
Helminth
Software
FakeM
Software
Starloader
Software
FELIXROOT
Software
EVILNUM
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.