MITRE ATT&CKsoftware (malware)
S0519 SYNful Knock
- Domain
- enterprise
- Platforms
- Network Devices
- Version
- 1.1
- Created
- 2020-10-19
Description
SYNful Knock is a stealthy modification of the operating system of network devices that can be used to maintain persistence within a victim's network and provide new capabilities to the adversary.
Related
References
- https://cloud.google.com/blog/topics/threat-intelligence/synful-knock-acis/ Mandiant - Synful Knock
- https://blogs.cisco.com/security/evolution-of-attacks-on-cisco-ios-devices Cisco Synful Knock Evolution