Tool
RayInitiator
- First Reported
- Apr 23, 2026
- Latest Reported
- Apr 23, 2026
Reported Context (1)
- backdoor dubbed “FIRESTARTER.” FIRESTARTER considerably overlaps with the technical capabilities of RayInitiator’s Stage 3 shellcode that processes incoming XML-based payloads to endpoint APIs. UAT-4356 Uses FIRESTARTER Backdoor to Target Cisco Firepower Devices
CVE (2)
Malware (1)
Threat Actors (1)
MITRE ATT&CK (3)
Vendors (1)
Products (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.