MITRE ATT&CKsoftware (malware)
S1222 RIFLESPINE
- Domain
- enterprise
- Platforms
- Linux
- Version
- 1.0
- Created
- 2025-06-12
Description
RIFLESPINE is a cross-platform backdoor that leverages Google Drive for file transfer and command execution.
Related
Uses · MITRE ATT&CK (10)
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1102.002 Bidirectional Communication sub-technique
- T1074.001 Local Data Staging sub-technique
- T1059.004 Unix Shell sub-technique
- T1567.002 Exfiltration to Cloud Storage sub-technique
- T1543.002 Systemd Service sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1082 System Information Discovery technique
- T1105 Ingress Tool Transfer technique
Referenced by MITRE ATT&CK · uses (1)
- G1048 UNC3886 group
References
- https://cloud.google.com/blog/topics/threat-intelligence/uncovering-unc3886-espionage-operations Google Cloud Mandiant UNC3886 2024