MITRE ATT&CKsoftware (malware)

S1106 NGLite

Published 2024-02-08 Modified 2024-04-19 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-02-08

Description

NGLite is a backdoor Trojan that is only capable of running commands received through its C2 channel. While the capabilities are standard for a backdoor, NGLite uses a novel C2 channel that leverages a decentralized network based on the legitimate NKN to communicate between the backdoor and the actors.

Related

Uses · MITRE ATT&CK (5)

  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1090.003 Multi-hop Proxy sub-technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique

References