MITRE ATT&CKsoftware (malware)

S1112 STEADYPULSE

Published 2024-02-09 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.1
Created
2024-02-09

Description

STEADYPULSE is a web shell that infects targeted Pulse Secure VPN servers through modification of a legitimate Perl script that was used as early as 2020 including in activity against US Defense Industrial Base (DIB) entities.

Related

Uses · MITRE ATT&CK (5)

  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1505.003 Web Shell sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1105 Ingress Tool Transfer technique

References