Tool
Bareclaw
- First Reported
- Oct 16, 2026
- Latest Reported
- Oct 16, 2026
Reported Context (2)
- observed the APT targeting a BeyondTrust device for initial access, deploying the Sawfly webshell and Bareclaw tunneler for interaction with the device, escalating privileges, and moving laterally within the China-Linked APT Exploited BeyondTrust Remote Support Flaw as a Zero-Day
- sensitive internal documents from victims' desktops. It also debuted a second, new custom tool, "BARECLAW," for SOCKS5 tunnelling. China-Nexus Actor Exploited BeyondTrust Remote Support Zero-Day
CVE (1)
Malware (1)
People (1)
Threat Actors (2)
MITRE ATT&CK (11)
Vendors (1)
Products (1)
Industries (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.