Malware
Prime ReverseShell
- First Reported
- Nov 3, 2026
- Latest Reported
- Nov 3, 2026
Reported Context (2)
- Initial attack waves observed in early 2025 have utilized Prime ReverseShell, a derivative of PSSW100AVB that functions as a reverse shell to execute commands on compromised systems and return the results back to a C2 ESET Reports Gorbag Campaigns Targeting Ukrainian Organizations With Data-Stealing Malware
- The group’s toolset consists of a PowerShell reverse shell that we named Prime ReverseShell, and a C++ browser-data and file stealer that we named BeautyStealer. ESET Details Gorbag’s Cyberespionage Campaign Targeting Ukraine
CVE (1)
Malware (3)
People (1)
Threat Actors (4)
MITRE ATT&CK (18)
Products (13)
Tools (2)
Industries (4)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.