S0198WindowsLinuxmacOS

S0198NETWIRE

Platforms
3
ATT&CK
14.1
References
4

Description

[NETWIRE](https://attack.mitre.org/software/S0198) is a publicly available, multiplatform remote administration tool (RAT) that has been used by criminal and APT groups since at least 2012.(Citation: FireEye APT33 Sept 2017)(Citation: McAfee Netwire Mar 2015)(Citation: FireEye APT33 Webinar Sept 2017)

Platforms· 3

WindowsLinuxmacOS

References

  1. https://attack.mitre.org/software/S0198
  2. https://www.brighttalk.com/webcast/10703/275683
  3. https://securingtomorrow.mcafee.com/mcafee-labs/netwire-rat-behind-recent-targeted-attacks/
  4. https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
PoisonIvy
Software
njRAT
Software
AsyncRAT
Software
Net
Software
netsh
Software
Revenge RAT
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.