SweetPotato

Reported Context (1)

Additionally, several modified Potato-family privilege escalation tools—including a version of SweetPotato modified for use in a web shell environment—were detected on the infected system. Attackers Exploit Telerik CVE-2019-18935 to Install Web Shells and Scan for Exposed WordPress Pages

CVE (1)

Malware (1)

Threat Actors (1)

MITRE ATT&CK (9)

Vendors (1)

Products (3)

Tools (1)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.