MITRE ATT&CKsoftware (malware)

S1084 QUIETEXIT

Published 2023-08-17 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.1
Created
2023-08-17

Description

QUIETEXIT is a novel backdoor, based on the open-source Dropbear SSH client-server software, that has been used by APT29 since at least 2021. APT29 has deployed QUIETEXIT on opaque network appliances that typically don't support antivirus or endpoint detection and response tools within a victim environment.

Related

Uses · MITRE ATT&CK (5)

  • T1090.002 External Proxy sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1008 Fallback Channels technique
  • T1071 Application Layer Protocol technique
  • T1095 Non-Application Layer Protocol technique

Referenced by MITRE ATT&CK · uses (1)

References