MITRE ATT&CK Technique
T1521.001
- First Reported
- Jul 10, 2026
- Latest Reported
- Oct 29, 2026
Reported Context (2)
- Recovered native code includes a ChaCha20 implementation; the report says this layer may wrap command traffic. Zimperium Analyzes Coruna and DarkSword iOS Exploit Chains
- The native library libnaLib.so encrypts C2 traffic with AES and uses dynamically generated IVs based on request timestamps. Zimperium Details GoldPickaxe Variant Stealing Banking and Biometric Data
CVE (1)
Malware (1)
Threat Actors (1)
MITRE ATT&CK (20)
Vendors (2)
Products (5)
Tools (4)
Countries (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.