MITRE ATT&CKsoftware (malware)

S1118 BUSHWALK

Published 2024-03-07 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.1
Created
2024-03-07

Description

BUSHWALK is a web shell written in Perl that was inserted into the legitimate querymanifest.cgi file on compromised Ivanti Connect Secure VPNs during Cutting Edge.

Related

Uses · MITRE ATT&CK (6)

  • T1554 Compromise Host Software Binary technique
  • T1505.003 Web Shell sub-technique
  • T1205 Traffic Signaling technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1027 Obfuscated Files or Information technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

  • C0029 Cutting Edge campaign

References