MITRE ATT&CKsoftware (malware)

S1188 Line Runner

Published 2025-01-06 Modified 2025-04-15 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.0
Created
2025-01-06

Description

Line Runner is a persistent backdoor and web shell allowing threat actors to upload and execute arbitrary Lua scripts. Line Runner is associated with the ArcaneDoor campaign.

Related

Uses · MITRE ATT&CK (8)

Referenced by MITRE ATT&CK · uses (1)

  • C0046 ArcaneDoor campaign

References