MITRE ATT&CKsoftware (malware)
S1219 REPTILE
- Domain
- enterprise
- Platforms
- Linux
- Version
- 1.0
- Created
- 2025-06-09
Description
REPTILE is an open-source Linux rootkit with multiple components that provides backdoor access and functionality.
Related
Uses · MITRE ATT&CK (11)
- T1546.017 Udev Rules sub-technique
- T1205.001 Port Knocking sub-technique
- T1573.002 Asymmetric Cryptography sub-technique
- T1059.004 Unix Shell sub-technique
- T1564.001 Hidden Files and Directories sub-technique
- T1547.006 Kernel Modules and Extensions sub-technique
- T1543.004 Launch Daemon sub-technique
- T1205 Traffic Signaling technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1014 Rootkit technique
- T1095 Non-Application Layer Protocol technique
References
- https://cloud.google.com/blog/topics/threat-intelligence/uncovering-unc3886-espionage-operations Google Cloud Mandiant UNC3886 2024