Meterpreter

Reported Context (1)

directly on the C2 server. Directories named test/testnew/z/ and AAAA/ served as staging areas for Meterpreter payloads. Custom shell scripts (q.sh, q80.sh, q443.sh) served as quick-launch wrappers for reverse Hunt.io Links Roundcube Exploitation Toolkit Targeting Ukraine to APT28

Malware (4)

People (1)

Threat Actors (3)

MITRE ATT&CK (20)

Vendors (5)

Products (10)

Tools (6)

Industries (3)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.