MITRE ATT&CKsoftware (malware)

S1116 WARPWIRE

Published 2024-03-05 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.1
Created
2024-03-05

Description

WARPWIRE is a Javascript credential stealer that targets plaintext passwords and usernames for exfiltration that was used during Cutting Edge to target Ivanti Connect Secure VPNs.

Related

Uses · MITRE ATT&CK (5)

  • T1059.007 JavaScript sub-technique
  • T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1056.003 Web Portal Capture sub-technique
  • T1554 Compromise Host Software Binary technique

Referenced by MITRE ATT&CK · uses (1)

  • C0029 Cutting Edge campaign

References