MITRE ATT&CKsoftware (malware)

S1115 WIREFIRE

Published 2024-03-04 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Aliases
GIFTEDVISITOR
Version
1.1
Created
2024-03-04

Description

WIREFIRE is a web shell written in Python that exists as trojanized logic to the visits.py component of Ivanti Connect Secure VPN appliances. WIREFIRE was used during Cutting Edge for downloading files and command execution.

Related

Uses · MITRE ATT&CK (7)

  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1554 Compromise Host Software Binary technique
  • T1505.003 Web Shell sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

  • C0029 Cutting Edge campaign

References