MITRE ATT&CKsoftware (malware)

S1120 FRAMESTING

Published 2024-03-08 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.1
Created
2024-03-08

Description

FRAMESTING is a Python web shell that was used during Cutting Edge to embed into an Ivanti Connect Secure Python package for command execution.

Related

Uses · MITRE ATT&CK (7)

  • T1001.003 Protocol or Service Impersonation sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1059.006 Python sub-technique
  • T1554 Compromise Host Software Binary technique
  • T1505.003 Web Shell sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1001 Data Obfuscation technique

Referenced by MITRE ATT&CK · uses (1)

  • C0029 Cutting Edge campaign

References