Malware
Roadk1ll
- First Reported
- Mar 30, 2026
- Latest Reported
- Apr 1, 2026
Reported Context (2)
- treating remote access as high-risk and tightening controls to detect legitimate-looking intrusions #Roadk1ll #ScreenConnect. Blackpoint Cyber Report Finds Intrusions Often Use Legitimate Access Paths
- RoadK1ll is a newly identified Node.js implant that establishes an outbound WebSocket-based reverse tunnel to convert a compromised host into a relay for lateral movement. RoadK1ll Implant Uses WebSocket Tunnels to Pivot Through Breached Networks
MITRE ATT&CK (8)
Vendors (2)
Products (2)
Industries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.