Plink

Reported Context (1)

and controlling CollectionRAT, the newest malware in the actor’s arsenal. A malicious copy of PuTTY’s Plink utility (a reverse-tunneling tool) was also hosted on the same infrastructure serving CollectionRAT to Lazarus Group Uses CollectionRAT and DeimosC2 in Enterprise Campaign

CVE (1)

Malware (9)

People (3)

Threat Actors (2)

Vendors (1)

Products (13)

Tools (6)

Industries (2)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.