BreakChain

Reported Context (1)

After repeated terminations, the attackers deployed a utility called BreakChain, which relaunches a target so that it no longer appears as a child of the IIS worker process (w3wp.exe). It offers five launch modes and Symantec Details AI-Assisted Intrusion and Rapid Lateral Movement at U.S. Retailer

CVE (1)

MITRE ATT&CK (15)

Vendors (3)

Products (10)

Tools (5)

Industries (2)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.