Tool
bt-secrets
- First Reported
- Oct 16, 2026
- Latest Reported
- Oct 16, 2026
Reported Context (1)
- Mandiant observed the actor abusing the legitimate /ns/sbin/bt-secrets administrative utility to attempt to retrieve passwords, API keys, and other credentials stored in the appliance’s native secrets vault. BeyondTrust Remote Support Zero-Day Exploited in Espionage Campaign
CVE (1)
Malware (2)
Threat Actors (1)
MITRE ATT&CK (9)
Vendors (1)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.