S0662Windows
S0662RCSession
Platforms
1
ATT&CK
14.1
References
4
Description
[RCSession](https://attack.mitre.org/software/S0662) is a backdoor written in C++ that has been in use since at least 2018 by [Mustang Panda](https://attack.mitre.org/groups/G0129) and by [Threat Group-3390](https://attack.mitre.org/groups/G0027) (Type II Backdoor).(Citation: Secureworks BRONZE PRESIDENT December 2019)(Citation: Trend Micro Iron Tiger April 2021)(Citation: Trend Micro DRBControl February 2020)
Platforms· 1
Windows
Attributed to1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Group | Mustang Pandag0129 | 95% | live |
References
- https://attack.mitre.org/software/S0662
- https://www.secureworks.com/research/bronze-president-targets-ngos
- https://www.trendmicro.com/en_us/research/21/d/iron-tiger-apt-updates-toolkit-with-evolved-sysupdate-malware-va.html
- https://documents.trendmicro.com/assets/white_papers/wp-uncovering-DRBcontrol.pdf
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.