MITRE ATT&CKsoftware (malware)

S1223 THINCRUST

Published 2025-06-16 Modified 2025-06-16 Official page ↗
Domain
enterprise
Platforms
Network Devices
Version
1.0
Created
2025-06-16

Description

THINCRUST is a Python-based backdoor tool that has been used by UNC3886 since at least 2023.

Related

Uses · MITRE ATT&CK (5)

  • T1686 Disable or Modify System Firewall technique
  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1059.006 Python sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique

Referenced by MITRE ATT&CK · uses (1)

References