MITRE ATT&CKsoftware (malware)

S1123 PITSTOP

Published 2024-03-13 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.1
Created
2024-03-13

Description

PITSTOP is a backdoor that was deployed on compromised Ivanti Connect Secure VPNs during Cutting Edge to enable command execution and file read/write.

Related

Uses · MITRE ATT&CK (5)

  • T1205.002 Socket Filters sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1559 Inter-Process Communication technique
  • T1140 Deobfuscate/Decode Files or Information technique

Referenced by MITRE ATT&CK · uses (1)

  • C0029 Cutting Edge campaign

References