ChainWorm

Reported Context (3)

#Webworm ESET Details Webworm’s Shift to European Government Targets and New C2 Backdoors
Other tools of note are iox and custom proxy solutions such as WormFrp, ChainWorm, SmuxProxy, and WormSocket. Webworm Adds EchoCreep and GraphWorm Backdoors Using Discord and Microsoft Graph API
The group increasingly uses legitimate or semi-legitimate proxy tooling, including SoftEther VPN, frp, iox, and custom tools such as WormFrp, ChainWorm, SmuxProxy, and WormSocket. ESET Details Webworm’s New Discord and Microsoft Graph Backdoors

CVE (1)

Malware (8)

People (2)

Threat Actors (6)

MITRE ATT&CK (17)

Vendors (7)

Products (6)

Tools (9)

Industries (4)

Countries (14)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.