Skip to content
Threat Feed
Subscribe

Tag

Modular-Malware

2 briefs RSS
high threat

NeedyMantis Modular Post-Compromise Framework

NeedyMantis is a modular, multi-stage malware framework used by threat actors like Storm-3069 to establish persistence and perform follow-on operations via DLL sideloading and custom encrypted archives.

Storm-3069 persistence defense-evasion post-compromise modular-malware
2t 2i
high threat

Cyclops Blink Modular Linux Implant Targeting Network-Edge Appliances

The IRON VIKING threat group has deployed an updated modular Cyclops Blink variant on Cisco Firewall Management Center devices, using SysV persistence and masquerading as a kernel thread to conduct reconnaissance and remote operations.

Firewall Management Center +2 IRON VIKING cyclops-blink iron-viking linux modular-malware network-edge
1r updated