Malware
RayInitiator
- First Reported
- Apr 23, 2026
- Latest Reported
- Apr 24, 2026
Reported Context (2)
- The resilience aside, it also shares some level of overlap with a previously documented bootkit referred to as RayInitiator. CISA Reports FIRESTARTER Backdoor on Federal Cisco Firepower Device
- that Firestarter shares significant technical similarities with a previously documented implant called RayInitiator, suggesting the tools share a common origin or development history within UAT-4356’s arsenal. Firestarter Backdoor Persisted on Cisco Firewalls Despite Patches, Agencies Warn
CVE (2)
Malware (2)
Threat Actors (4)
MITRE ATT&CK (4)
Vendors (1)
Products (6)
Tools (1)
Industries (2)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.