MITRE ATT&CKsoftware (malware)
S1117 GLASSTOKEN
- Domain
- enterprise
- Platforms
- Network Devices
- Version
- 1.1
- Created
- 2024-03-06
Description
GLASSTOKEN is a custom web shell used by threat actors during Cutting Edge to execute commands on compromised Ivanti Secure Connect VPNs.
Related
Uses · MITRE ATT&CK (4)
Referenced by MITRE ATT&CK · uses (1)
- C0029 Cutting Edge campaign
References
- https://www.volexity.com/blog/2024/01/10/active-exploitation-of-two-zero-day-vulnerabilities-in-ivanti-connect-secure-vpn/ Volexity Ivanti Zero-Day Exploitation January 2024