Trochilus

Reported Context (1)

The code of the backdoor is based on an open-source Windows remote access trojan (RAT) named Trochilus, and shares several common characteristics with the RedLeaves backdoor; nevertheless, it was extended and modified ESET details FishMonger’s Windows SprySOCKS backdoor variants and kernel-driver stealth

CVE (1)

Malware (6)

Threat Actors (6)

MITRE ATT&CK (38)

Vendors (1)

Products (1)

Tools (2)

Industries (1)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.