S0350Windows
S0350zwShell
Platforms
1
ATT&CK
14.1
References
2
Description
[zwShell](https://attack.mitre.org/software/S0350) is a remote access tool (RAT) written in Delphi that has been seen in the wild since the spring of 2010 and used by threat actors during [Night Dragon](https://attack.mitre.org/campaigns/C0002).(Citation: McAfee Night Dragon)
Documented platforms: Windows. Catalogued in ATT&CK 14.1. 2 references curated.
Platforms· 1
Windows
References
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.